Loading npm security reports…

@nemus-cli/nemus@0.2.10: AI-agent control-surface risk | LPM Firewall

registry / @nemus-cli/nemus / 0.2.10

@nemus-cli/nemus@0.2.10

Nemus — a CLI for managing multi-repository workspaces. Create, sync, and operate across dozens of repos with a single command, and wire them up to your favorite coding agent.

AI Security Review

scanned 3h ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Installing or upgrading the package can alter configured AI-agent control surfaces without an explicit setup command. It adds a Claude Stop hook, copies agent skills, and may install Pi extensions.

Static reason

One or more suspicious static signals were detected.

Trigger

npm install or upgrade, when the detected configured agent CLI is available

Impact

The package gains code and configuration presence in user-level Claude Code and Pi agent environments.

Mechanism

Post-install lifecycle invokes an agent upgrade that writes hooks, skills, and extensions.

Policy narrative

The npm post-install script automatically launches the package's upgrade routine. When a configured agent CLI is detected, that routine writes a Claude Code Stop hook and skills, and can add Pi extensions. These are persistent user-level AI-agent control-surface changes made as part of installation rather than an explicit setup command.

Rationale

The package performs unconsented post-install mutation of foreign, user-level AI-agent configuration and extension directories. This meets the firewall block boundary despite the changes being labeled as Nemus-managed.

Evidence

package.jsonscripts/postinstall.jsdist/mcp/install.jsdist/utils/permission-sync.jsdist/utils/pi-extensions.jsinstall-shell-integration.sh~/.claude/settings.json~/.claude/skills~/.pi/agent/skills~/.pi/agent/extensions

Source & flagged code

6 flagged

package.jsonView file

Lines 47-87json

47 "skills/**/*.md",

48 "uninstall.sh",

49 "assets/**/*",

50 "README.md",

51 "LICENSE",

52 "CHANGELOG.md",

53 "tsconfig.json"

54 ],

55 "bin": {

56 "nemus": "bin/workspace.js",

57 "nem": "bin/workspace.js",

58 "nemus-mcp": "dist/mcp/server.js"

59 },

60 "scripts": {

61 "test": "vitest run",

62 "test:watch": "vitest",

63 "build": "tsc && cp src/commands/dashboard/sidebar.js dist/commands/dashboard/sidebar.js && rm -rf dist/pi-extensions && cp -r src/pi-extensions dist/pi-extensions && rm -rf dist/scripts && cp -r src/scripts dist/scripts",

64 "clean": "rm -rf dist",

65 "typecheck": "tsc --noEmit",

66 "prepublishOnly": "npm run clean && npm run build",

67 "postinstall": "node scripts/postinstall.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L67

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L67

68 },

69 "dependencies": {

70 "@modelcontextprotocol/sdk": "^1.26.0",

71 "cli-progress": "^3.12.0",

72 "commander": "^15.0.0",

73 "fuzzy": "^0.1.3",

74 "ink": "^7.1.1",

75 "inquirer": "^8.0.0",

76 "inquirer-autocomplete-prompt": "^2.0.0",

77 "markdown-table": "^3.0.3",

78 "react": "^19.2.8",

79 "zod": "^4.3.6"

80 },

81 "devDependencies": {

82 "@types/cli-progress": "^3.11.0",

83 "@types/inquirer": "^9.0.3",

84 "@types/inquirer-autocomplete-prompt": "^2.0.0",

85 "@types/node": "^26.3.0",

86 "@types/react": "^19.2.2",

87 "ts-node": "^10.9.1",

bin/workspace.jsView file

Lines 1-22javascript

1#!/usr/bin/env node

2

3const path = require('path');

4const command = process.argv[2];

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/workspace.jsView on unpkg · L2

src/utils/bug-report.tsView file

Lines 1-31typescript

1/**

2 * Bug reporting — capture runtime errors and file them as GitHub issues

3 * against the project repo.

4 *

5 * Design goals (see PR discussion):

6 * - Sanitize: never leak home dir, usernames, emails, or token-like strings.

7 * - Deduplicate: one issue per distinct error signature (search before create).

8 * - Safe: only file genuine tool errors; skip clearly-environmental ones unless

9 * forced. Auto-filing is opt-in via config (autoReportBugs).

10 */

uninstall.shView file

•path = uninstall.sh kind = build_helper sizeBytes = 4891 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

uninstall.shView on unpkg

scripts/check-lock-version.jsView file

•stage = ast_semantic_analysis; reason = ast_trace_path_limit_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

scripts/check-lock-version.jsView on unpkg