registry / @nextsparkjs/ai-workflow / 0.1.0-beta.191

@nextsparkjs/ai-workflow@0.1.0-beta.191

AI workflow templates for NextSpark - Claude Code agents, commands, skills, and multi-editor support

AI Security Review

scanned 18d ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. Automatic installation can update an existing NextSpark consumer's Claude Code extension files. No credential theft, payload download, or external exfiltration was identified.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review

Trigger

npm postinstall in a NextSpark project that already contains .claude.

Impact

This is a guarded first-party AI-agent extension lifecycle mutation, but it can replace existing agent control files without an explicit setup command.

Mechanism

The hook invokes setup.mjs, which copies package-owned workflow files and replaces matching files in selected .claude subdirectories.

AI rationale

The source establishes a guarded automatic overwrite path into an existing Claude configuration. It does not establish exfiltration, remote code loading, or destructive behavior, so blocking is not warranted.

Evidence

package.jsonscripts/postinstall.mjsscripts/setup.mjs.claude/agents.claude/commands.claude/skills.claude/templates.claude/workflows.claude/_docs

Decision evidence

public snapshot

AI called this Suspicious at 90.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

The package registers an automatic postinstall hook that launches its setup script when a NextSpark project already has a .claude directory.
The setup script overwrites matching Claude agent, command, skill, template, workflow, and documentation files in the consumer project.

Evidence against

The lifecycle action is guarded to NextSpark projects with an existing .claude directory.
No source evidence showed credential collection, external network requests from lifecycle code, or a runtime self-dependency.

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemShell

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 3 file(s), 19.1 KB of source

Source & flagged code

8 flagged

package.jsonView file

Lines 10-35json

10 "url": "git+https://github.com/NextSpark-js/nextspark.git",

11 "directory": "packages/ai-workflow"

12 },

13 "keywords": [

14 "nextjs",

15 "ai",

16 "workflow",

17 "claude",

18 "cursor",

19 "agents",

20 "developer-tools"

21 ],

22 "type": "module",

23 "main": "./scripts/setup.mjs",

24 "files": [

25 "claude",

26 "cursor",

27 "scripts",

28 "README.md"

29 ],

30 "scripts": {

31 "setup": "node scripts/setup.mjs",

32 "sync": "node scripts/sync.mjs",

33 "postinstall": "node scripts/postinstall.mjs || true"

Medium

Suspicious Lifecycle Evidence

The package registers an automatic postinstall hook that launches its setup script when a NextSpark project already has a .claude directory.

package.jsonView on unpkg · L30

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L33

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L33

34 }

35}

claude/skills/nextjs-api-development/scripts/generate-crud-tests.pyView file

Lines 154-194python

154 return f'''/// <reference types="cypress" />

155

156/**

157 * {pascal} API - CRUD Tests

158 *

159 * Basic CRUD operations for /api/v1/{entity} endpoints

160 * Uses superadmin API key for full access with team context

161 */

162

163import * as allure from 'allure-cypress'

164

165const {pascal}APIController = require('../../../src/controllers/{pascal}APIController.js')

scripts/postinstall.mjsView file

•matchType = normalized_sha256 matchedPackage = @nextsparkjs/ai-workflow@0.1.0-beta.186 matchedPath = scripts/postinstall.mjs matchedIdentity = npm:[redacted]:0.1.0-beta.186 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/postinstall.mjsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = fea36c82f5d62ce2 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @nextsparkjs/ai-workflow@0.1.0-beta.186 matchedPath = scripts/postinstall.mjs matchedIdentity = npm:[redacted]:0.1.0-beta.186 similarity = 1.000 shingleOverlap = 3 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

scripts/postinstall.mjsView on unpkg

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.mjs || true

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.mjs || true

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

30"scripts": { "setup": "node scripts/setup.mjs", "sync": "node scripts/sync.mjs", "postinstall": "node scripts/postinstall.mjs || true"

Medium

Suspicious Lifecycle Evidence

The package registers an automatic postinstall hook that launches its setup script when a NextSpark project already has a .claude directory.

package.jsonView on unpkg · L30

claude/skills/nextjs-api-development/scripts/generate-crud-tests.pyView file

174patternName = stripe_test_secret severity = high line = 174

High

High Secret

Package contains a high-severity secret pattern.

claude/skills/nextjs-api-development/scripts/generate-crud-tests.pyView on unpkg · L174

174patternName = stripe_test_secret severity = high line = 174

High

Secret Pattern

Stripe test secret key in claude/skills/nextjs-api-development/scripts/generate-crud-tests.py

claude/skills/nextjs-api-development/scripts/generate-crud-tests.pyView on unpkg · L174

•path = claude/skills/nextjs-api-development/scripts/generate-crud-tests.py kind = build_helper sizeBytes = 15892 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

claude/skills/nextjs-api-development/scripts/generate-crud-tests.pyView on unpkg

scripts/postinstall.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/postinstall.mjsView on unpkg

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

scripts/postinstall.mjsView on unpkg

Findings

5 High5 Medium2 Low

HighInstall Time Lifecycle Scriptspackage.json

HighHigh Secretclaude/skills/nextjs-api-development/scripts/generate-crud-tests.py

HighKnown Malware Source Similarityscripts/postinstall.mjs

HighKnown Malware Source Fingerprint Signaturescripts/postinstall.mjs

HighSecret Patternclaude/skills/nextjs-api-development/scripts/generate-crud-tests.py

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumEnvironment Vars

MediumShips Build Helperclaude/skills/nextjs-api-development/scripts/generate-crud-tests.py

MediumStructural Risk Force Deep Review

MediumSuspicious Lifecycle Evidencepackage.json

LowScripts Present

LowFilesystem

Affected versions and remediation

This report applies to @nextsparkjs/ai-workflow@0.1.0-beta.191.

See version security history for other recorded verdicts.

Review the evidence and your use of @nextsparkjs/ai-workflow@0.1.0-beta.191 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-20 20:46:12.537Z (UTC).