Loading npm security reports…

@nextsparkjs/ai-workflow: AI-agent control-surface risk | LPM Firewall

registry / @nextsparkjs/ai-workflow / 0.1.0-beta.194

@nextsparkjs/ai-workflow@0.1.0-beta.194

AI workflow templates for NextSpark - Claude Code agents, commands, skills, and multi-editor support

AI Security Review

scanned 2d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Installation automatically replaces matching Claude agent instructions and capabilities in the consumer project or parent workspace. An existing Claude directory is treated as permission to modify it, without verifying package ownership.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review

Trigger

npm installation in a project with a NextSpark dependency and an existing project or parent .claude directory.

Impact

Existing agent instructions, commands, and skills can be replaced without explicit consent, including in a shared parent workspace.

Mechanism

The postinstall hook executes setup, which recursively copies bundled templates over matching files in multiple Claude control directories.

Policy narrative

The lifecycle hook checks for a NextSpark dependency, then locates any existing project or parent Claude directory. It invokes setup there automatically. Setup overwrites matching agent, command, skill, and workflow files without verifying that the package owns them. This reaches a broad agent control surface rather than an isolated package extension.

AI rationale

Source establishes unconsented install-time mutation of a broad Claude control surface, which meets the blocking policy. The NextSpark dependency guard does not establish ownership of the affected agent files or shared parent workspace. Product guard normalized a concrete AI-agent control hijack publish_block to the blockable dangerous-capability shape.

Evidence

package.jsonscripts/postinstall.mjsscripts/setup.mjs.claude

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.mjs || true

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

33"postinstall": "node scripts/postinstall.mjs || true" } }

High

Suspicious Lifecycle Evidence

package.json automatically runs the postinstall script during installation.

package.jsonView on unpkg · L33

•scripts.postinstall = node scripts/postinstall.mjs || true

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

claude/skills/nextjs-api-development/scripts/generate-crud-tests.pyView file

169patternName = stripe_test_secret severity = high line = 169

High

High Secret

Package contains a high-severity secret pattern.

claude/skills/nextjs-api-development/scripts/generate-crud-tests.pyView on unpkg · L169

169patternName = stripe_test_secret severity = high line = 169

High

Secret Pattern

Stripe test secret key in claude/skills/nextjs-api-development/scripts/generate-crud-tests.py

claude/skills/nextjs-api-development/scripts/generate-crud-tests.pyView on unpkg · L169

•path = claude/skills/nextjs-api-development/scripts/generate-crud-tests.py kind = build_helper sizeBytes = 15483 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

claude/skills/nextjs-api-development/scripts/generate-crud-tests.pyView on unpkg

scripts/postinstall.mjsView file

•matchType = normalized_sha256 matchedPackage = @nextsparkjs/ai-workflow@0.1.0-beta.193 matchedPath = scripts/postinstall.mjs matchedIdentity = npm:[redacted]:0.1.0-beta.193 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/postinstall.mjsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = fea36c82f5d62ce2 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @nextsparkjs/ai-workflow@0.1.0-beta.193 matchedPath = scripts/postinstall.mjs matchedIdentity = npm:[redacted]:0.1.0-beta.193 similarity = 1.000 shingleOverlap = 3 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

scripts/postinstall.mjsView on unpkg

Source & flagged code

8 flagged

package.jsonView file

Lines 13-35json

13 "keywords": [

14 "nextjs",

15 "ai",

16 "workflow",

17 "claude",

18 "cursor",

19 "agents",

20 "developer-tools"

21 ],

22 "type": "module",

23 "main": "./scripts/setup.mjs",

24 "files": [

25 "claude",

26 "cursor",

27 "scripts",

28 "README.md"

29 ],

30 "scripts": {

31 "setup": "node scripts/setup.mjs",

32 "sync": "node scripts/sync.mjs",

33 "postinstall": "node scripts/postinstall.mjs || true"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L33

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L33

34 }

35}

High

Suspicious Lifecycle Evidence

package.json automatically runs the postinstall script during installation.

package.jsonView on unpkg · L33

claude/skills/nextjs-api-development/scripts/generate-crud-tests.pyView file

Lines 149-189python

149 return f'''/// <reference types="cypress" />

150

151/**

152 * {pascal} API - CRUD Tests

153 *

154 * Basic CRUD operations for /api/v1/{entity} endpoints

155 * Uses superadmin API key for full access with team context

156 */

157

158import * as allure from 'allure-cypress'

159

160const {pascal}APIController = require('../../../src/controllers/{pascal}APIController.js')

scripts/postinstall.mjsView file

•matchType = normalized_sha256 matchedPackage = @nextsparkjs/ai-workflow@0.1.0-beta.193 matchedPath = scripts/postinstall.mjs matchedIdentity = npm:[redacted]:0.1.0-beta.193 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/postinstall.mjsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = fea36c82f5d62ce2 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @nextsparkjs/ai-workflow@0.1.0-beta.193 matchedPath = scripts/postinstall.mjs matchedIdentity = npm:[redacted]:0.1.0-beta.193 similarity = 1.000 shingleOverlap = 3 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

scripts/postinstall.mjsView on unpkg