@mdd-ai-eng/specs@1.0.0
AI 工程化 MDD 通用规范包。标识 mdd-ai-eng 用于区分同名锚点。ai-engineering-specs 只放规范正文。安装时按实际位置刷新业务项目锚点。
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe automatic postinstall mutation installs package-controlled instructions into the consumer's agent configuration and elevates them as governing rules. This is unconsented AI-agent control-surface hijacking.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Installing the package with lifecycle scripts enabled triggers postinstall.
Impact
Agents using those configurations may follow package-supplied rules as controlling instructions.
Mechanism
The installer writes a Cursor rule and a Kilo rules file that point to the package's AGENTS.md, without an affirmative consent check.
Policy narrative
During package installation, the postinstall hook adds or updates Cursor and Kilo agent rules in the consuming project. Those rules direct agents to load the package's AGENTS.md as their highest action rules. The source shows no affirmative consent check before these configuration writes.
AI rationale
The automatic postinstall mutation installs package-controlled instructions into the consumer's agent configuration and elevates them as governing rules. This is unconsented AI-agent control-surface hijacking.
Evidence
package.jsonscripts/install-anchors.jsai-engineering-specs/AGENTS.md.cursor/rules/mdd-ai-eng.mdc.kilocoderrules
Decision evidence
public snapshotAI identified this as a dangerous AI-agent capability at 98.0% confidence with low false-positive risk.
Evidence for policy risk
- The package runs the anchor installer automatically from its postinstall hook.
- The installer writes a rule file under the consuming project's Cursor configuration and a Kilo rules file at the project root.
- The generated anchor directs agents to load this package's AGENTS.md as their highest action rules.
- The installer writes or updates those configuration files without an affirmative consent check.
Evidence against
Behavioral surface
EnvironmentVarsFilesystem
NoLicense
Source & flagged code
7 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/install-anchors.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg9"scripts": {
"postinstall": "node scripts/install-anchors.js",
"test": "node test/install-anchors.test.js",
"check":
High
Suspicious Lifecycle Evidence
The package runs the anchor installer automatically from its postinstall hook.
package.jsonView on unpkg · L9scripts/install-anchors.jsView file
66"ai-engineering-specs",
L67: "AGENTS.md"
L68: );
...
L71: }
L72: return path.join(specDirectory, "AGENTS.md");
L73: }
...
L79: }
L80: fs.mkdirSync(directory, { recursive: true });
L81: fs.writeFileSync(filePath, next, "utf8");
L82: return { action: existing === null ? "write" : "update", filePath };
Critical
Ai Agent Control Hijack
Findings
1 Critical6 High2 Medium3 Low
CriticalAi Agent Control Hijackscripts/install-anchors.js
HighInstall Time Lifecycle Scriptspackage.json
HighSuspicious Lifecycle Evidencepackage.json
HighAi Review Evidencescripts/install-anchors.js
HighAi Review Evidencescripts/install-anchors.js
HighAi Review Evidencescripts/install-anchors.js
HighAi Review Evidenceai-engineering-specs/AGENTS.md
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowNo License
Affected versions and remediation
This report applies to @mdd-ai-eng/specs@1.0.0.
See all versions of @mdd-ai-eng/specs for other recorded verdicts.
- Avoid installing @mdd-ai-eng/specs@1.0.0. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.