registry / @lousy-agents/lint / 5.17.0

@lousy-agents/lint@5.17.0

Programmatic lint API for validating AI coding assistant configurations — skills, agents, hooks, and instructions

AI Security Review

scanned 13d ago · by lpm-firewall-ai

No confirmed malicious attack surface was established. The package performs user-invoked linting of AI-agent configuration files under a caller-supplied project directory.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

Importing the package and calling runLint(options).

Impact

Reads lint-relevant project files and may execute a user-provided config loader path as expected for c12-based configuration.

Mechanism

Project file linting with optional config loading

Rationale

Static inspection found risky bundled primitives, but their observed use is aligned with a lint/config-loading library and there is no lifecycle execution, credential collection, persistence, destructive action, or exfiltration. Scanner hits for network, dynamic require, and Unicode appear to come from dependencies or parser tables rather than package-specific malware.

Evidence

package.jsonREADME.mddist/index.jsdist/index.d.tsdist/913.jsdist/653.js

Decision evidence

public snapshot

AI called this Clean at 90.0% confidence as Benign with low false-positive risk.

Evidence for block

Bundled c12/jiti/giget code contains dynamic import/require, child_process, fetch, and cache writes in dist/index.js and dist/653.js.
runLint loads optional user config via c12 from the target directory in dist/index.js.

Evidence against

package.json has no install/preinstall/postinstall lifecycle hooks and exports only dist/index.js.
Public API is a lint library: runLint validates a caller-supplied directory, reads project lint inputs, and returns diagnostics.
File reads are package-aligned: skills, agents, hooks, instructions, package.json, and optional lousy-agents config.
No credential harvesting or exfiltration path is called by the package entrypoint.
dist/913.js Unicode is from bundled JSON5 identifier regexes, not Trojan Source control flow.
Network and child_process findings are in bundled dependencies/chunks, not confirmed package-triggered attack behavior.

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystemNativeBindingsNetwork

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

Manifest

WildcardDependency

scanned 10 file(s), 1.94 MB of source, external domains: api.github.com, bitbucket.com, bitbucket.org, blog.stevenlevithan.com, caniuse.com, developer.mozilla.org, git.sr.ht, github.com, gitlab.com, json-schema.org, nodejs.org, raw.githubusercontent.com, spec.commonmark.org, stackoverflow.com, thekevinscott.com, www.unicode.org

Source & flagged code

2 flagged

dist/index.jsView file

1import { createRequire as __rspack_createRequire } from "node:module"; L2: const __rspack_createRequire_require = __rspack_createRequire(import.meta.url); L3: var __webpack_modules__ = ({

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L1

dist/913.jsView file

Lines 1-40javascript

1export const __rspack_esm_id = 913;

2export const __rspack_esm_ids = [913];

3export const __webpack_modules__ = {

42576(__unused_rspack___webpack_module__, __webpack_exports__, __webpack_require__) {

6// EXPORTS

7__webpack_require__.d(__webpack_exports__, {

8 parseJSON5: () => (/* binding */ json5_s)

9});

11// UNUSED EXPORTS: stringifyJSON5

13// EXTERNAL MODULE: external "node:module"

14var external_node_module_ = __webpack_require__(8995);

15;// CONCATENATED MODULE: ../../node_modules/confbox/dist/_chunks/rolldown-runtime.mjs

16var rolldown_runtime_e=Object.create,rolldown_runtime_t=Object.defineProperty,rolldown_runtime_n=Object.getOwnPropertyDescriptor,rolldown_runtime_r=Object.getOwnPropertyNames,rolldown_runtime_i=Object.getPrototypeOf,rolldown_runtime_a=Object.prototype.hasOwnProperty,rolldown_runtime_o=(e,t)=>()=>(t||e((t={exports:{}}).exports,t),t.exports),rolldown_runtime_s=(e,i,o,s)=>{if

17// EXTERNAL MODULE: ../../node_modules/confbox/dist/_chunks/_format.mjs

18var _format = __webpack_require__(5492);

19;// CONCATENATED MODULE: ../../node_modules/confbox/dist/_chunks/libs/json5.mjs

20var json5_t=rolldown_runtime_o(((e,t)=>{t.exports.Space_Separator=/[\u1680\u2000-\u200A\u202F\u205F\u3000]/,t.exports.ID_Start=/[\xAA\xB5\xBA\xC0-\xD6\xD8-\xF6\xF8-\u02C1\u02C6-\u02D1\u02E0-\u02E4\u02EC\u02EE\u0370-\u0374\u0376\u0377\u037A-\u037D\u037F\u0386\u0388-\u038A\u038C\u038E-\u03A1\u03A3-\u03F5\u03F7-\u0481\u048A-\u052F\u0531-\u0556\u0559\u0561-\u0587\u05D0-\u05EA\u05F0

21`?(c++,l=0):e?l+=e.length:l++,e&&(s+=e.length),e}let S={default(){switch(v){case` `:case`\v`:case`\f`:case` `:case`\xA0`:case``:case`

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/913.jsView on unpkg · L21

22`:case`\r`:case`\u2028`:case`\u2029`:x();return;case`/`:x(),m=`comment`;return;case void 0:return x(),C(`eof`)}if(r.isSpaceSeparator(v)){x();return}return S[a]()},comment(){switch(v){case`*`:x(),m=`multiLineComment`;return;case`/`:x(),m=`singleLineComment`;return}throw j(x())},multiLineComment(){switch(v){case`*`:x(),m=`multiLineCommentAsterisk`;return;case void 0:throw j(x())}x()},multiLineCommentAsterisk(){switch(v){case`*`:x();return;case`/`:x(),m=`default`;return;case void 0:throw j(x())}x(),m=`multiLineComment`},singleLineComment(){switch(v){case`

23`:case`\r`:case`\u2028`:case`\u2029`:x(),m=`default`;return;case void 0:return x(),C(`eof`)}x()},value(){switch(v){case`{`:case`[`:return C(`punctuator`,x());case`n`:return x(),w(`ull`),C(`null`,null);case`t`:return x(),w(`rue`),C(`boolean`,!0);case`f`:return x(),w(`alse`),C(`boolean`,!1);case`-`:case`+`:x()===`-`&&(_=-1),m=`sign`;return;case`.`:h=x(),m=`

24`:case`\r`:throw j(x());case`\u2028`:case`\u2029`:P(v);break;case void 0:throw j(x())}h+=x()},start(){switch(v){case`{`:case`[`:return C(`punctuator`,x())}m=`value`},beforePropertyName(){switch(v){case`$`:case`_`:h=x(),m=`identifierName`;return;case`\\`:x(),m=`identifierNameStartEscape`;return;case`}`:return C(`punctuator`,x());case`"`:case`'`:g=x()===`"`,m=`string`;return}if(r.isIdStartChar(v)){h+=x(),m=`identifierName`;return}throw j(x())},afterPropertyName(){if(v===`:`)return C(`punctuator`,x());throw j(x())},beforePropertyValue(){m=`value`},afterPropertyValue(){switch(v){case`,`:case`

25`;case`r`:return x(),`\r`;case`t`:return x(),` `;case`v`:return x(),`\v`;case`0`:if(x(),r.isDigit(b()))throw j(x());return`\0`;case`x`:return x

26`:case`\u2028`:case`\u2029`:return x(),``;case`\r`:return x(),b()===`

27`&&x(),``;case`1`:case`2`:case`3`:case`4`:case`5`:case`6`:case`7`:case`8`:case`9`:throw j(x());case void 0:throw j(x())}return x()}function E(){

28`+a;e=r.join(n),s=`{

29`+a+e+`,

30`+t+`}`}}return i.pop(),a=t,s}function p(e){if(e.length===0)return d(e,!0);let t=String.fromCodePoint(e.codePointAt(0));if(!r.isIdStartChar(t))return d(e,!0);for(let n=t.length;n<e.length;n++)if(!r.isIdContinueChar(String.fromCodePoint(e.codePointAt(n))))return d(e,!0);return e}function m(e){if(i.indexOf(e)>=0)throw TypeError(`Converting circular structure to JSON5`);i.push(e);let t=a;a+=c;let n=[];for(let t=0;t<e.length;t++){let r=u(String(t),e);n.push(r===void 0?`null`:r)}let r;if(n.length===0)r=`[]`;else if(c===``)r=`[`+n.join(`,`)+`]`;else{let e=`,

31`+a,i=n.join(e);r=`[

32`+a+i+`,

33`+t+`]`}return i.pop(),a=t,r}}}));

34;// CONCATENATED MODULE: ../../node_modules/confbox/dist/json5.mjs

35var json5_a=rolldown_runtime_c(json5_r(),1),json5_o=rolldown_runtime_c(json5_i(),1);function json5_s(e,n){let r=(0,json5_a.default)(e,n?.reviver);return (0,_format.n)(e,r,n),r}function json5_c(e,t){let r=n(e,t),i=(0,json5_o.default)(e,t?.replacer,r.indent);return r.whitespace.start+i+r.whitespace.end}

37},

39};

Long lines were clipped for display.

Source & flagged code

2 flagged · loading source

dist/index.jsView file

1import { createRequire as __rspack_createRequire } from "node:module"; L2: const __rspack_createRequire_require = __rspack_createRequire(import.meta.url); L3: var __webpack_modules__ = ({

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L1

dist/913.jsView file

21contains invisible/control Unicode U+FEFF (zero width no-break space) `?(c++,l=0):e?l+=e.length:l++,e&&(s+=e.length),e}let S={default(){switch(v){case` `:case`\v`:case`\f`:case` `:case`\xA0`:case`<U+FEFF>`:case`

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/913.jsView on unpkg · L21

Findings

1 Critical5 Medium5 Low

CriticalTrojan Source Unicodedist/913.js

MediumDynamic Requiredist/index.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

MediumWildcard Dependency

LowScripts Present

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

2 flagged

dist/index.jsView file

1import { createRequire as __rspack_createRequire } from "node:module"; L2: const __rspack_createRequire_require = __rspack_createRequire(import.meta.url); L3: var __webpack_modules__ = ({

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L1

dist/913.jsView file

Lines 1-40javascript

1export const __rspack_esm_id = 913;

2export const __rspack_esm_ids = [913];

3export const __webpack_modules__ = {

42576(__unused_rspack___webpack_module__, __webpack_exports__, __webpack_require__) {

6// EXPORTS

7__webpack_require__.d(__webpack_exports__, {

8 parseJSON5: () => (/* binding */ json5_s)

9});

11// UNUSED EXPORTS: stringifyJSON5

13// EXTERNAL MODULE: external "node:module"

14var external_node_module_ = __webpack_require__(8995);

15;// CONCATENATED MODULE: ../../node_modules/confbox/dist/_chunks/rolldown-runtime.mjs

17// EXTERNAL MODULE: ../../node_modules/confbox/dist/_chunks/_format.mjs

18var _format = __webpack_require__(5492);

19;// CONCATENATED MODULE: ../../node_modules/confbox/dist/_chunks/libs/json5.mjs

21`?(c++,l=0):e?l+=e.length:l++,e&&(s+=e.length),e}let S={default(){switch(v){case` `:case`\v`:case`\f`:case` `:case`\xA0`:case``:case`

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/913.jsView on unpkg · L21

25`;case`r`:return x(),`\r`;case`t`:return x(),` `;case`v`:return x(),`\v`;case`0`:if(x(),r.isDigit(b()))throw j(x());return`\0`;case`x`:return x

26`:case`\u2028`:case`\u2029`:return x(),``;case`\r`:return x(),b()===`

27`&&x(),``;case`1`:case`2`:case`3`:case`4`:case`5`:case`6`:case`7`:case`8`:case`9`:throw j(x());case void 0:throw j(x())}return x()}function E(){

28`+a;e=r.join(n),s=`{

29`+a+e+`,

31`+a,i=n.join(e);r=`[

32`+a+i+`,

33`+t+`]`}return i.pop(),a=t,r}}}));

34;// CONCATENATED MODULE: ../../node_modules/confbox/dist/json5.mjs

37},

39};

Long lines were clipped for display.