Loading npm security reports…

@nextsparkjs/ai-workflow@0.1.0-beta.193: AI-agent control-surface | LPM Firewall

registry / @nextsparkjs/ai-workflow / 0.1.0-beta.193

@nextsparkjs/ai-workflow@0.1.0-beta.193

AI workflow templates for NextSpark - Claude Code agents, commands, skills, and multi-editor support

AI Security Review

scanned 2d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Automatic installation replaces files in an existing Claude agent control surface. It can reach the parent workspace and does not verify that matching files belong to this package.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review

Trigger

npm postinstall in a NextSpark consumer project with an existing project or parent .claude directory.

Impact

Existing agent instructions and capabilities can be replaced without an explicit setup command or ownership check.

Mechanism

The lifecycle invokes setup, which recursively copies shipped templates over matching agent, command, and skill files.

Policy narrative

Installing the package in a qualifying project automatically locates an existing .claude directory, potentially at the parent workspace level. The lifecycle then runs setup there and replaces matching agent instructions, commands, and skills with package content. The dependency and directory checks limit activation but do not establish consent or ownership of the affected control surface.

AI rationale

Inspected source establishes automatic, unconsented mutation of a broad AI-agent control surface, which meets the blocking policy. The NextSpark guard does not restrict writes to verified package-owned files.

Evidence

package.jsonscripts/postinstall.mjsscripts/setup.mjs.claude

Decision evidence

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.mjs || true

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

33"postinstall": "node scripts/postinstall.mjs || true" } }

High

Suspicious Lifecycle Evidence

package.json automatically runs scripts/postinstall.mjs during installation.

package.jsonView on unpkg · L33

•scripts.postinstall = node scripts/postinstall.mjs || true

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

claude/skills/nextjs-api-development/scripts/generate-crud-tests.pyView file

169patternName = stripe_test_secret severity = high line = 169

High

High Secret

Package contains a high-severity secret pattern.

claude/skills/nextjs-api-development/scripts/generate-crud-tests.pyView on unpkg · L169

169patternName = stripe_test_secret severity = high line = 169

High

Secret Pattern

Stripe test secret key in claude/skills/nextjs-api-development/scripts/generate-crud-tests.py

claude/skills/nextjs-api-development/scripts/generate-crud-tests.pyView on unpkg · L169

•path = claude/skills/nextjs-api-development/scripts/generate-crud-tests.py kind = build_helper sizeBytes = 15483 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

claude/skills/nextjs-api-development/scripts/generate-crud-tests.pyView on unpkg

scripts/postinstall.mjsView file

•matchType = normalized_sha256 matchedPackage = @nextsparkjs/ai-workflow@0.1.0-beta.186 matchedPath = scripts/postinstall.mjs matchedIdentity = npm:[redacted]:0.1.0-beta.186 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/postinstall.mjsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = fea36c82f5d62ce2 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @nextsparkjs/ai-workflow@0.1.0-beta.186 matchedPath = scripts/postinstall.mjs matchedIdentity = npm:[redacted]:0.1.0-beta.186 similarity = 1.000 shingleOverlap = 3 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

scripts/postinstall.mjsView on unpkg

Source & flagged code

8 flagged

package.jsonView file

Lines 13-35json

13 "keywords": [

14 "nextjs",

15 "ai",

16 "workflow",

17 "claude",

18 "cursor",

19 "agents",

20 "developer-tools"

21 ],

22 "type": "module",

23 "main": "./scripts/setup.mjs",

24 "files": [

25 "claude",

26 "cursor",

27 "scripts",

28 "README.md"

29 ],

30 "scripts": {

31 "setup": "node scripts/setup.mjs",

32 "sync": "node scripts/sync.mjs",

33 "postinstall": "node scripts/postinstall.mjs || true"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L33

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L33

34 }

35}

High

Suspicious Lifecycle Evidence

package.json automatically runs scripts/postinstall.mjs during installation.

package.jsonView on unpkg · L33

claude/skills/nextjs-api-development/scripts/generate-crud-tests.pyView file

Lines 149-189python

149 return f'''/// <reference types="cypress" />

150

151/**

152 * {pascal} API - CRUD Tests

153 *

154 * Basic CRUD operations for /api/v1/{entity} endpoints

155 * Uses superadmin API key for full access with team context

156 */

157

158import * as allure from 'allure-cypress'

159

160const {pascal}APIController = require('../../../src/controllers/{pascal}APIController.js')

scripts/postinstall.mjsView file

•matchType = normalized_sha256 matchedPackage = @nextsparkjs/ai-workflow@0.1.0-beta.186 matchedPath = scripts/postinstall.mjs matchedIdentity = npm:[redacted]:0.1.0-beta.186 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/postinstall.mjsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = fea36c82f5d62ce2 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @nextsparkjs/ai-workflow@0.1.0-beta.186 matchedPath = scripts/postinstall.mjs matchedIdentity = npm:[redacted]:0.1.0-beta.186 similarity = 1.000 shingleOverlap = 3 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

scripts/postinstall.mjsView on unpkg