registry / @lousy-agents/cli / 5.17.3

@lousy-agents/cli@5.17.3

CLI scaffolding tool that sets up projects with structure, instructions, and feedback loops for AI coding assistants

AI Security Review

scanned 2h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source

Trigger

User runs `lousy-agents init-hooks` or accepts prompts during `lousy-agents copilot-setup`.

Impact

Future Claude Code events can invoke the package CLI; optional GitHub ruleset operations use the user's GitHub credentials.

Mechanism

Explicit project-local AI-agent and npm configuration writes.

Rationale

Source inspection found no malicious execution chain, exfiltration, lifecycle persistence, or hidden payload. Per policy, explicit AI-agent control-surface mutation remains a warn-level capability risk.

Evidence

package.jsondist/index.jsdist/913.js.claude/settings.json.npmrc.github/workflows/copilot-setup-steps.yml

Network endpoints1

api.github.com

Decision evidence

public snapshot

AI called this Suspicious at 93.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

`dist/index.js` `init-hooks` writes project `.claude/settings.json` hooks invoking `lousy-agents context` and `capture`.
`dist/index.js` `copilot-setup` can add `agent-shell` to project `.npmrc` after a confirmation prompt.
`dist/index.js` resolves `GH_TOKEN`/`GITHUB_TOKEN` or runs `gh auth token` for optional GitHub ruleset actions.
`dist/index.js` uses Octokit against `https://api.github.com` when the user opts into Copilot ruleset management.

Evidence against

`package.json` has no `preinstall`, `install`, `postinstall`, or other lifecycle hook.
All control-surface writes are behind explicit CLI commands; ruleset and `.npmrc` changes request confirmation.
`capture` validates bounded stdin and writes a local prompt to stdout; it does not transmit transcript data.
`context` confines file reads to the selected project root and skips unsafe paths.
The `dist/913.js` Unicode hit is escaped JSON5 parser character-class data, not concealed bidi source behavior.
No credential or project-file exfiltration, remote payload download, destructive action, or stealth persistence was found.

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

Manifest

WildcardDependency

scanned 25 file(s), 613 KB of source, external domains: 127.0.0.1, api.github.com, bitbucket.com, bitbucket.org, caniuse.com, git.sr.ht, github.com, gitlab.com, raw.githubusercontent.com

Oversized source lightweight scan

dist/index.js2.10 MB file, sampled 256 KB

FilesystemChildProcessEnvironmentVarsHighEntropyStringsUrlStringscaniuse.com

Source & flagged code

4 flagged

dist/913.jsView file

Lines 1-40javascript

1export const __rspack_esm_id = 913;

2export const __rspack_esm_ids = [913];

3export const __webpack_modules__ = {

42576(__unused_rspack___webpack_module__, __webpack_exports__, __webpack_require__) {

6// EXPORTS

7__webpack_require__.d(__webpack_exports__, {

8 parseJSON5: () => (/* binding */ json5_s)

9});

11// UNUSED EXPORTS: stringifyJSON5

13// EXTERNAL MODULE: external "node:module"

14var external_node_module_ = __webpack_require__(8995);

15;// CONCATENATED MODULE: ../../node_modules/confbox/dist/_chunks/rolldown-runtime.mjs

16var rolldown_runtime_e=Object.create,rolldown_runtime_t=Object.defineProperty,rolldown_runtime_n=Object.getOwnPropertyDescriptor,rolldown_runtime_r=Object.getOwnPropertyNames,rolldown_runtime_i=Object.getPrototypeOf,rolldown_runtime_a=Object.prototype.hasOwnProperty,rolldown_runtime_o=(e,t)=>()=>(t||e((t={exports:{}}).exports,t),t.exports),rolldown_runtime_s=(e,i,o,s)=>{if(i&&typeof i==`object`||typeof i==`function`)for(var c=rolldown_runtime_r(i),l=0,u=c.length,d;l<u;l++)d=c[l],!rolldown_runtime_a.call(e,d)&&d!==o&&rolldown_runtime_t(e,d,{get:(e=>i[e]).bind(null,d),enumerable:!(s=rolldown_run ...

17// EXTERNAL MODULE: ../../node_modules/confbox/dist/_chunks/_format.mjs

18var _format = __webpack_require__(5492);

19;// CONCATENATED MODULE: ../../node_modules/confbox/dist/_chunks/libs/json5.mjs

20var json5_t=rolldown_runtime_o(((e,t)=>{t.exports.Space_Separator=/[\u1680\u2000-\u200A\u202F\u205F\u3000]/,t.exports.ID_Start=/[\xAA\xB5\xBA\xC0-\xD6\xD8-\xF6\xF8-\u02C1\u02C6-\u02D1\u02E0-\u02E4\u02EC\u02EE\u0370-\u0374\u0376\u0377\u037A-\u037D\u037F\u0386\u0388-\u038A\u038C\u038E-\u03A1\u03A3-\u03F5\u03F7-\u0481\u048A-\u052F\u0531-\u0556\u0559\u0561-\u0587\u05D0-\u05EA\u05F0-\u05F2\u0620-\u064A\u066E\u066F\u0671-\u06D3\u06D5\u06E5\u06E6\u06EE\u06EF\u06FA-\u06FC\u06FF\u0710\u0712-\u072F\u074D-\u07A5\u07B1\u07CA-\u07EA\u07F4\u07F5\u07FA\u0800-\u0815\u081A\u0824\u0828\u0840-\u0858\u0860-\u086A ...

21`?(c++,l=0):e?l+=e.length:l++,e&&(s+=e.length),e}let S={default(){switch(v){case` `:case`\v`:case`\f`:case` `:case`\xA0`:case``:case`

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/913.jsView on unpkg · L21

22`:case`\r`:case`\u2028`:case`\u2029`:x();return;case`/`:x(),m=`comment`;return;case void 0:return x(),C(`eof`)}if(r.isSpaceSeparator(v)){x();return}return S[a]()},comment(){switch(v){case`*`:x(),m=`multiLineComment`;return;case`/`:x(),m=`singleLineComment`;return}throw j(x())},multiLineComment(){switch(v){case`*`:x(),m=`multiLineCommentAsterisk`;return;case void 0:throw j(x())}x()},multiLineCommentAsterisk(){switch(v){case`*`:x();return;case`/`:x(),m=`default`;return;case void 0:throw j(x())}x(),m=`multiLineComment`},singleLineComment(){switch(v){case`

23`:case`\r`:case`\u2028`:case`\u2029`:x(),m=`default`;return;case void 0:return x(),C(`eof`)}x()},value(){switch(v){case`{`:case`[`:return C(`punctuator`,x());case`n`:return x(),w(`ull`),C(`null`,null);case`t`:return x(),w(`rue`),C(`boolean`,!0);case`f`:return x(),w(`alse`),C(`boolean`,!1);case`-`:case`+`:x()===`-`&&(_=-1),m=`sign`;return;case`.`:h=x(),m=`decimalPointLeading`;return;case`0`:h=x(),m=`zero`;return;case`1`:case`2`:case`3`:case`4`:case`5`:case`6`:case`7`:case`8`:case`9`:h=x(),m=`decimalInteger`;return;case`I`:return x(),w(`nfinity`),C(`numeric`,1/0);case`N`:return x(),w(`aN`),C(`nu ...

24`:case`\r`:throw j(x());case`\u2028`:case`\u2029`:P(v);break;case void 0:throw j(x())}h+=x()},start(){switch(v){case`{`:case`[`:return C(`punctuator`,x())}m=`value`},beforePropertyName(){switch(v){case`$`:case`_`:h=x(),m=`identifierName`;return;case`\\`:x(),m=`identifierNameStartEscape`;return;case`}`:return C(`punctuator`,x());case`"`:case`'`:g=x()===`"`,m=`string`;return}if(r.isIdStartChar(v)){h+=x(),m=`identifierName`;return}throw j(x())},afterPropertyName(){if(v===`:`)return C(`punctuator`,x());throw j(x())},beforePropertyValue(){m=`value`},afterPropertyValue(){switch(v){case`,`:case`}`:re ...

25`;case`r`:return x(),`\r`;case`t`:return x(),` `;case`v`:return x(),`\v`;case`0`:if(x(),r.isDigit(b()))throw j(x());return`\0`;case`x`:return x(),E();case`u`:return x(),D();case`

26`:case`\u2028`:case`\u2029`:return x(),``;case`\r`:return x(),b()===`

27`&&x(),``;case`1`:case`2`:case`3`:case`4`:case`5`:case`6`:case`7`:case`8`:case`9`:throw j(x());case void 0:throw j(x())}return x()}function E(){let e=``,t=b();if(!r.isHexDigit(t)||(e+=x(),t=b(),!r.isHexDigit(t)))throw j(x());return e+=x(),String.fromCodePoint(parseInt(e,16))}function D(){let e=``,t=4;for(;t-- >0;){let t=b();if(!r.isHexDigit(t))throw j(x());e+=x()}return String.fromCodePoint(parseInt(e,16))}let O={start(){if(u.type===`eof`)throw M();k()},beforePropertyName(){switch(u.type){case`identifier`:case`string`:d=u.value,a=`afterPropertyName`;return;case`punctuator`:A();return;case`eof` ...

28`+a;e=r.join(n),s=`{

29`+a+e+`,

30`+t+`}`}}return i.pop(),a=t,s}function p(e){if(e.length===0)return d(e,!0);let t=String.fromCodePoint(e.codePointAt(0));if(!r.isIdStartChar(t))return d(e,!0);for(let n=t.length;n<e.length;n++)if(!r.isIdContinueChar(String.fromCodePoint(e.codePointAt(n))))return d(e,!0);return e}function m(e){if(i.indexOf(e)>=0)throw TypeError(`Converting circular structure to JSON5`);i.push(e);let t=a;a+=c;let n=[];for(let t=0;t<e.length;t++){let r=u(String(t),e);n.push(r===void 0?`null`:r)}let r;if(n.length===0)r=`[]`;else if(c===``)r=`[`+n.join(`,`)+`]`;else{let e=`,

31`+a,i=n.join(e);r=`[

32`+a+i+`,

33`+t+`]`}return i.pop(),a=t,r}}}));

34;// CONCATENATED MODULE: ../../node_modules/confbox/dist/json5.mjs

35var json5_a=rolldown_runtime_c(json5_r(),1),json5_o=rolldown_runtime_c(json5_i(),1);function json5_s(e,n){let r=(0,json5_a.default)(e,n?.reviver);return (0,_format.n)(e,r,n),r}function json5_c(e,t){let r=n(e,t),i=(0,json5_o.default)(e,t?.replacer,r.indent);return r.whitespace.start+i+r.whitespace.end}

37},

39};

Long lines were clipped for display.

dist/index.jsView file

•path = dist/index.js kind = oversized_source_file sizeBytes = 2198905 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/index.jsView on unpkg

•path = dist/index.js kind = oversized_cli_entrypoint sizeBytes = 2198905 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/index.jsView on unpkg

dist/653.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @lousy-agents/cli@5.17.1 matchedIdentity = npm:QGxvdXN5LWFnZW50cy9jbGk:5.17.1 similarity = 0.909 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/653.jsView on unpkg

Source & flagged code

4 flagged · loading source

dist/913.jsView file

21contains invisible/control Unicode U+FEFF (zero width no-break space) `?(c++,l=0):e?l+=e.length:l++,e&&(s+=e.length),e}let S={default(){switch(v){case` `:case`\v`:case`\f`:case` `:case`\xA0`:case`<U+FEFF>`:case`

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/913.jsView on unpkg · L21

dist/index.jsView file

•path = dist/index.js kind = oversized_source_file sizeBytes = 2198905 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/index.jsView on unpkg

•path = dist/index.js kind = oversized_cli_entrypoint sizeBytes = 2198905 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/index.jsView on unpkg

dist/653.jsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/653.jsView on unpkg

Findings

1 Critical2 High5 Medium5 Low

CriticalTrojan Source Unicodedist/913.js

HighOversized Source Filedist/index.js

HighPrevious Version Dangerous Deltadist/653.js

MediumNetwork

MediumEnvironment Vars

MediumOversized Cli Entrypointdist/index.js

MediumStructural Risk Force Deep Review

MediumWildcard Dependency

LowScripts Present

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

4 flagged

dist/913.jsView file

Lines 1-40javascript

1export const __rspack_esm_id = 913;

2export const __rspack_esm_ids = [913];

3export const __webpack_modules__ = {

42576(__unused_rspack___webpack_module__, __webpack_exports__, __webpack_require__) {

6// EXPORTS

7__webpack_require__.d(__webpack_exports__, {

8 parseJSON5: () => (/* binding */ json5_s)

9});

11// UNUSED EXPORTS: stringifyJSON5

13// EXTERNAL MODULE: external "node:module"

14var external_node_module_ = __webpack_require__(8995);

15;// CONCATENATED MODULE: ../../node_modules/confbox/dist/_chunks/rolldown-runtime.mjs

17// EXTERNAL MODULE: ../../node_modules/confbox/dist/_chunks/_format.mjs

18var _format = __webpack_require__(5492);

19;// CONCATENATED MODULE: ../../node_modules/confbox/dist/_chunks/libs/json5.mjs

21`?(c++,l=0):e?l+=e.length:l++,e&&(s+=e.length),e}let S={default(){switch(v){case` `:case`\v`:case`\f`:case` `:case`\xA0`:case``:case`

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/913.jsView on unpkg · L21

25`;case`r`:return x(),`\r`;case`t`:return x(),` `;case`v`:return x(),`\v`;case`0`:if(x(),r.isDigit(b()))throw j(x());return`\0`;case`x`:return x(),E();case`u`:return x(),D();case`

26`:case`\u2028`:case`\u2029`:return x(),``;case`\r`:return x(),b()===`

28`+a;e=r.join(n),s=`{

29`+a+e+`,

31`+a,i=n.join(e);r=`[

32`+a+i+`,

33`+t+`]`}return i.pop(),a=t,r}}}));

34;// CONCATENATED MODULE: ../../node_modules/confbox/dist/json5.mjs

37},

39};

Long lines were clipped for display.

dist/index.jsView file

•path = dist/index.js kind = oversized_source_file sizeBytes = 2198905 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/index.jsView on unpkg

•path = dist/index.js kind = oversized_cli_entrypoint sizeBytes = 2198905 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/index.jsView on unpkg

dist/653.jsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/653.jsView on unpkg