registry / @mdd-ai-eng/specs / 1.1.2
@mdd-ai-eng/specs@1.1.2
AI 工程化 MDD 通用规范包。标识 mdd-ai-eng 用于区分同名锚点。ai-engineering-specs 只放规范正文。安装时按实际位置刷新业务项目锚点。
AI Security Review
scanned 3d ago · by lpm-firewall-aiSource confirms an automatic install-time setup that modifies project agent rules and promotes package-provided instructions. This matches first-party agent extension lifecycle risk; the inspected code does not establish a broader attack.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Installing the package with lifecycle scripts enabled.
Impact
Subsequent agent sessions may follow package-provided instructions that affect how they handle project tasks.
Mechanism
The installer writes a package-named Cursor rule and inserts or refreshes a marked Kilo rules block that directs agents to the bundled governance file.
AI rationale
Source confirms an automatic install-time setup that modifies project agent rules and promotes package-provided instructions. This matches first-party agent extension lifecycle risk; the inspected code does not establish a broader attack.
Evidence
package.jsonscripts/install-anchors.jsai-engineering-specs/AGENTS.md.cursor/rules/mdd-ai-eng.mdc.kilocoderrules
Decision evidence
public snapshotAI called this Suspicious at 84.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package postinstall hook runs the anchor installer automatically.
- The installer creates or updates a project Cursor rule and inserts or replaces a marked block in the project Kilo rules file.
- The generated anchor directs agents to load the package’s bundled governance file and treat it as the highest-priority guidance.
- The bundled file itself says agents must treat it and its indexes as their highest action rules.
Evidence against
- The writes are limited to a package-named Cursor rule and a marked Kilo block; the installer preserves content outside that block.
- The package describes this agent-configuration setup as its intended installation behavior.
Behavioral surface
EnvironmentVarsFilesystem
NoLicense
Source & flagged code
7 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/install-anchors.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg10"postinstall": "node scripts/install-anchors.js",
"test": "node test/install-anchors.test.js",
"check": "bash scripts/check-system.sh",
"release": "bash scripts/rele
Medium
Suspicious Lifecycle Evidence
The package postinstall hook runs the anchor installer automatically.
package.jsonView on unpkg · L10scripts/install-anchors.jsView file
66"ai-engineering-specs",
L67: "AGENTS.md"
L68: );
...
L71: }
L72: return path.join(specDirectory, "AGENTS.md");
L73: }
...
L79: }
L80: fs.mkdirSync(directory, { recursive: true });
L81: fs.writeFileSync(filePath, next, "utf8");
L82: return { action: existing === null ? "write" : "update", filePath };
Critical
Findings
1 Critical1 High7 Medium3 Low
CriticalAi Agent Control Hijackscripts/install-anchors.js
HighInstall Time Lifecycle Scriptspackage.json
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumSuspicious Lifecycle Evidencepackage.json
MediumAi Review Evidencescripts/install-anchors.js
MediumAi Review Evidencescripts/install-anchors.js
MediumAi Review Evidencescripts/install-anchors.js
MediumAi Review Evidencescripts/install-anchors.js
LowScripts Present
LowFilesystem
LowNo License
Affected versions and remediation
This report applies to @mdd-ai-eng/specs@1.1.2.
See all versions of @mdd-ai-eng/specs for other recorded verdicts.
- Review the evidence and your use of @mdd-ai-eng/specs@1.1.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.