Loading npm security reports…

@navianpulse/designcheck@2.3.0: AI-agent control-surface risk | LPM Firewall

registry / @navianpulse/designcheck / 2.3.0

@navianpulse/designcheck@2.3.0

Zero-dependency, no-baseline design-QA for rendered web UI — layout, accessibility, performance, SEO, links, security, and resilience across viewports and generated states. Built to be run by an AI coding agent on its own output.

AI Security Review

scanned 20d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. npm install runs postinstall, which auto-installs a Claude Code skill into the user home directory. That copies this package's SKILL.md and engine into Claude's skills folder so a later agent session loads vendor instructions without an explicit setup command.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm install of @navianpulse/designcheck@2.3.0 unless NAVIAN_NO_SETUP=1 or CI=true

Impact

Claude Code can load package-authored skill instructions that steer the agent to run this tool and brand replies, without a separate user setup command.

Mechanism

unconsented postinstall write into ~/.claude/skills/designcheck

Policy narrative

On npm install, postinstall runs unless NAVIAN_NO_SETUP or CI is set and invokes auto setup. That path copies this package's SKILL.md and designcheck.js into the Claude Code skills folder in the user home directory, so the next agent session can load vendor instructions without an explicit setup command. Those instructions tell the agent to run this tool on UI work and to brand replies as using Navian. Cursor and Codex writes stay behind an explicit --setup flag and are not the blocking issue.

AI rationale

The postinstall hook calls auto setup, which installs a Claude Code skill under the user home directory without an explicit user command. That is unconsented install-time mutation of a foreign AI-agent control surface, so the package should be blocked; Pulse telemetry and LLM provider APIs are opt-in and are not the block reason.

Evidence

package.jsondist/bin/postinstall.jsdist/lib/setup.jsdist/docs/USER-MANUAL-IDE.mddist/SKILL.md~/.claude/skills/designcheck/SKILL.md

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.postinstall = node dist/bin/postinstall.js || true

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node dist/bin/postinstall.js || true

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/bin/designcheck.jsView file

12`+l.reasons.join(` L13: `):"")),d&&d.bundle&&d.bundle.trace&&d.bundle.trace[0]){const S=d.bundle.trace[0];console.log(" re-execute: designcheck "+o(S.url)+(Number.isFinite(S.width)?" --width="+Number... L14: Reply ONLY compact JSON: {"text_in_image": true|false, "decorative": true|false, "alt_ok": true|false, "better_alt": "improved alt or empty", "confidence": 0.0-1.0}.

High

Child Process

Package source references child process execution.

dist/bin/designcheck.jsView on unpkg · L12

1#!/usr/bin/env node L2: "use strict";var _e=Object.defineProperty;var x=(e,t)=>_e(e,"name",{value:t,configurable:!0});const{readJson}=require("../lib/readjson");let chromium=null,pwDevices={};try{const e=... L3: navian-designcheck: this trial ended`+(s?" on "+s:"")+" and has stopped working."+r+` ... L12: `+l.reasons.join(` L13: `):"")),d&&d.bundle&&d.bundle.trace&&d.bundle.trace[0]){const S=d.bundle.trace[0];console.log(" re-execute: designcheck "+o(S.url)+(Number.isFinite(S.width)?" --width="+Number... L14: Reply ONLY compact JSON: {"text_in_image": true|false, "decorative": true|false, "alt_ok": true|false, "better_alt": "improved alt or empty", "confidence": 0.0-1.0}.

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/bin/designcheck.jsView on unpkg · L1

1#!/usr/bin/env node L2: "use strict";var _e=Object.defineProperty;var x=(e,t)=>_e(e,"name",{value:t,configurable:!0});const{readJson}=require("../lib/readjson");let chromium=null,pwDevices={};try{const e=... L3: navian-designcheck: this trial ended`+(s?" on "+s:"")+" and has stopped working."+r+` ... L7: This build requires a valid per-customer license (NAVIAN_LICENSE_ENFORCE=1). L8: `),process.exit(2)),console.error(" \u26A0 UNLICENSED (advisory): "+o+". Running anyway \u2014 set NAVIAN_LICENSE_ENFORCE=1 to require one."),t}x(licenseGate,"licenseGate");functi... L9: Next: npx playwright install chromium (one-time browser), then ask your agent to audit a page.`),process.exit(e.fail.length?1:0)}const installLicFlag=flags.find(e=>e.startsWith("... ... L12: `+l.reasons.join(` L13: `):"

High

Host Fingerprint Exfiltration

Source collects local host identity data and sends it to an external endpoint.

dist/bin/designcheck.jsView on unpkg · L1

1package = @navianpulse/designcheck; repositoryIdentity = navian-designcheck; dependency = playwright L1: #!/usr/bin/env node L2: "use strict";var _e=Object.defineProperty;var x=(e,t)=>_e(e,"name",{value:t,configurable:!0});const{readJson}=require("../lib/readjson");let chromium=null,pwDevices={};try{const e=... L3: navian-designcheck: this trial ended`+(s?" on "+s:"")+" and has stopped working."+r+`

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/bin/designcheck.jsView on unpkg · L1

dist/lib/setup.jsView file

1"use strict";var l=Object.defineProperty;var s=(e,t)=>l(e,"name",{value:t,configurable:!0});const fs=require("fs"),os=require("os"),path=require("path"),RULES_SNIPPET=["## navian-d... L2: `),MARKER="navian-designcheck \u2014 rendered-UI auditor";function pkgRoot(){return path.join(__dirname,"..")}s(pkgRoot,"pkgRoot");function installClaudeSkill(e){const t=path.join(... L3: L4: `:"")+RULES_SNIPPET),"Codex AGENTS.md \u2192 "+t+(n?" (appended)":" (created)"))}s(installCodexAgents,"installCodexAgents");function installLicense(e,t){if(!e)throw new Error("n... L5: `,{mode:384}),fs.renameSync(c,r);try{fs.chmodSync(r,384)}catch{}return r}s(installLicense,"installLicense");function runSetup(e){e=e||{};const t=[],n=[];function i(o){try{t.push(o(... L6: `,{mode:384}),fs.renameSync(r,o);try{fs

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

dist/lib/setup.jsView on unpkg · L1

dist/lib/navian-core.wasmView file

•path = dist/lib/navian-core.wasm kind = wasm_module sizeBytes = 557648 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

dist/lib/navian-core.wasmView on unpkg

Source & flagged code

8 flagged

package.jsonView file

•scripts.postinstall = node dist/bin/postinstall.js || true

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node dist/bin/postinstall.js || true

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/bin/designcheck.jsView file

12`+l.reasons.join(` L13: `):"")),d&&d.bundle&&d.bundle.trace&&d.bundle.trace[0]){const S=d.bundle.trace[0];console.log(" re-execute: designcheck "+o(S.url)+(Number.isFinite(S.width)?" --width="+Number... L14: Reply ONLY compact JSON: {"text_in_image": true|false, "decorative": true|false, "alt_ok": true|false, "better_alt": "improved alt or empty", "confidence": 0.0-1.0}.

High

Child Process

Package source references child process execution.

dist/bin/designcheck.jsView on unpkg · L12

1#!/usr/bin/env node L2: "use strict";var _e=Object.defineProperty;var x=(e,t)=>_e(e,"name",{value:t,configurable:!0});const{readJson}=require("../lib/readjson");let chromium=null,pwDevices={};try{const e=... L3: navian-designcheck: this trial ended`+(s?" on "+s:"")+" and has stopped working."+r+` ... L12: `+l.reasons.join(` L13: `):"")),d&&d.bundle&&d.bundle.trace&&d.bundle.trace[0]){const S=d.bundle.trace[0];console.log(" re-execute: designcheck "+o(S.url)+(Number.isFinite(S.width)?" --width="+Number... L14: Reply ONLY compact JSON: {"text_in_image": true|false, "decorative": true|false, "alt_ok": true|false, "better_alt": "improved alt or empty", "confidence": 0.0-1.0}.

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/bin/designcheck.jsView on unpkg · L1

1#!/usr/bin/env node L2: "use strict";var _e=Object.defineProperty;var x=(e,t)=>_e(e,"name",{value:t,configurable:!0});const{readJson}=require("../lib/readjson");let chromium=null,pwDevices={};try{const e=... L3: navian-designcheck: this trial ended`+(s?" on "+s:"")+" and has stopped working."+r+` ... L7: This build requires a valid per-customer license (NAVIAN_LICENSE_ENFORCE=1). L8: `),process.exit(2)),console.error(" \u26A0 UNLICENSED (advisory): "+o+". Running anyway \u2014 set NAVIAN_LICENSE_ENFORCE=1 to require one."),t}x(licenseGate,"licenseGate");functi... L9: Next: npx playwright install chromium (one-time browser), then ask your agent to audit a page.`),process.exit(e.fail.length?1:0)}const installLicFlag=flags.find(e=>e.startsWith("... ... L12: `+l.reasons.join(` L13: `):"

High

Host Fingerprint Exfiltration

Source collects local host identity data and sends it to an external endpoint.

dist/bin/designcheck.jsView on unpkg · L1

1package = @navianpulse/designcheck; repositoryIdentity = navian-designcheck; dependency = playwright L1: #!/usr/bin/env node L2: "use strict";var _e=Object.defineProperty;var x=(e,t)=>_e(e,"name",{value:t,configurable:!0});const{readJson}=require("../lib/readjson");let chromium=null,pwDevices={};try{const e=... L3: navian-designcheck: this trial ended`+(s?" on "+s:"")+" and has stopped working."+r+`

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/bin/designcheck.jsView on unpkg · L1

dist/lib/setup.jsView file

1"use strict";var l=Object.defineProperty;var s=(e,t)=>l(e,"name",{value:t,configurable:!0});const fs=require("fs"),os=require("os"),path=require("path"),RULES_SNIPPET=["## navian-d... L2: `),MARKER="navian-designcheck \u2014 rendered-UI auditor";function pkgRoot(){return path.join(__dirname,"..")}s(pkgRoot,"pkgRoot");function installClaudeSkill(e){const t=path.join(... L3: L4: `:"")+RULES_SNIPPET),"Codex AGENTS.md \u2192 "+t+(n?" (appended)":" (created)"))}s(installCodexAgents,"installCodexAgents");function installLicense(e,t){if(!e)throw new Error("n... L5: `,{mode:384}),fs.renameSync(c,r);try{fs.chmodSync(r,384)}catch{}return r}s(installLicense,"installLicense");function runSetup(e){e=e||{};const t=[],n=[];function i(o){try{t.push(o(... L6: `,{mode:384}),fs.renameSync(r,o);try{fs

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

dist/lib/setup.jsView on unpkg · L1

dist/lib/navian-core.wasmView file

•path = dist/lib/navian-core.wasm kind = wasm_module sizeBytes = 557648 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

dist/lib/navian-core.wasmView on unpkg