registry / @mdd-ai-eng/specs / 1.1.1
@mdd-ai-eng/specs@1.1.1
AI 工程化 MDD 通用规范包。标识 mdd-ai-eng 用于区分同名锚点。ai-engineering-specs 只放规范正文。安装时按实际位置刷新业务项目锚点。
AI Security Review
scanned 3d ago · by lpm-firewall-aiSource confirms automatic, unguarded mutation of project-level agent configuration during postinstall. The setup is package-aligned, so this warrants a warning rather than a block.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
The npm postinstall hook runs during package installation.
Impact
The package gains influence over later agent behavior in the consuming project without a separate setup confirmation.
Mechanism
The installer writes a Cursor rule and a Kilo rules anchor directing agents to load the package’s AGENTS.md as their highest action standard.
AI rationale
Source confirms automatic, unguarded mutation of project-level agent configuration during postinstall. The setup is package-aligned, so this warrants a warning rather than a block.
Evidence
package.jsonscripts/install-anchors.js.cursor/rules/mdd-ai-eng.mdc.kilocoderrules
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The postinstall hook automatically runs the anchor installer.
- The installer writes a rule directing agents to load this package’s AGENTS.md as their highest action standard.
- It writes project-level Cursor and Kilo configuration without a consent check.
- The README describes this as the package’s intended agent-setup behavior, but installation still triggers it automatically.
Evidence against
- The installer points agents to this package’s own specification files, and the README describes the configuration changes as the package’s intended function.
Behavioral surface
EnvironmentVarsFilesystem
NoLicense
Source & flagged code
7 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/install-anchors.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg10"postinstall": "node scripts/install-anchors.js",
"test": "node test/install-anchors.test.js",
"
Medium
Suspicious Lifecycle Evidence
The postinstall hook automatically runs the anchor installer.
package.jsonView on unpkg · L10scripts/install-anchors.jsView file
66"ai-engineering-specs",
L67: "AGENTS.md"
L68: );
...
L71: }
L72: return path.join(specDirectory, "AGENTS.md");
L73: }
...
L79: }
L80: fs.mkdirSync(directory, { recursive: true });
L81: fs.writeFileSync(filePath, next, "utf8");
L82: return { action: existing === null ? "write" : "update", filePath };
Critical
Ai Agent Control Hijack
Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.
Findings
1 Critical1 High7 Medium3 Low
CriticalAi Agent Control Hijackscripts/install-anchors.js
HighInstall Time Lifecycle Scriptspackage.json
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumSuspicious Lifecycle Evidencepackage.json
MediumAi Review Evidencescripts/install-anchors.js
MediumAi Review Evidencescripts/install-anchors.js
MediumAi Review Evidencescripts/install-anchors.js
MediumAi Review Evidencescripts/install-anchors.js
LowScripts Present
LowFilesystem
LowNo License
Affected versions and remediation
This report applies to @mdd-ai-eng/specs@1.1.1.
See all versions of @mdd-ai-eng/specs for other recorded verdicts.
- Review the evidence and your use of @mdd-ai-eng/specs@1.1.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.