@ngocsangairvds/vsaf@6.11.0
is it ready to use ?
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThis is a real, user-invoked AI-agent configuration capability and merits a warning under the firewall policy. It is not concrete malicious behavior because the npm lifecycle hook is package-local and the control-surface writes are command-gated.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
User runs `vsaf install <pack>` in a project.
Impact
Configured Claude events may execute package-supplied project-local gate scripts.
Mechanism
Copies package-supplied hooks and merges Claude event-hook configuration.
AI rationale
This is a real, user-invoked AI-agent configuration capability and merits a warning under the firewall policy. It is not concrete malicious behavior because the npm lifecycle hook is package-local and the control-surface writes are command-gated.
Evidence
packages/cli/dist/commands/install/hooks.jsskills/NTAPP/hooks/settings.jsonpackages/cli/dist/commands/install/credentials.jspackages/cli/dist/index.jspackage.json.claude/hooks/.claude/settings.jsonhooks/
Decision evidence
public snapshotAI called this Suspicious at 90.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- Explicit `vsaf install` deploys hook files and merges Claude settings.
- NTAPP ships event-hook declarations that execute project-local scripts for Claude events.
- Optional Bitbucket integration reads an existing token or Git credential for user-requested repository access.
Evidence against
- The postinstall hook only creates a package-local `node_modules/@vsaf/core` link.
- Agent configuration changes require the explicit `vsaf install` command.
- Global sync is off by default and exposed as `--sync-global`; no stealth persistence or exfiltration was found.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinifiedProtestwareUrlStrings
Source & flagged code
21 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node -e "const fs=require('fs'),p=require('path'),r=p.resolve;const d=r(process.cwd(),'node_modules','@vsaf');fs.mkdirSync(d,{recursive:true});const t=r(d,'core'),src=r(process.cwd...
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node -e "const fs=require('fs'),p=require('path'),r=p.resolve;const d=r(process.cwd(),'node_modules','@vsaf');fs.mkdirSync(d,{recursive:true});const t=r(d,'core'),src=r(process.cwd...
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgskills/vds-skill/vds-scripts/pdf_orchestrator/tests/conftest.pyView file
194patternName = aws_access_key
severity = critical
line = 194
matchedText = - AKIA12... key
Findings
5 Critical13 High8 Medium5 Low
CriticalCritical Secretskills/vds-skill/vds-scripts/pdf_orchestrator/tests/conftest.py
CriticalSecret Patternskills/vds-skill/vds-scripts/pdf_orchestrator/tests/conftest.py
CriticalSecret Patternskills/vds-skill/vds-scripts/pdf_orchestrator/tests/conftest.py
CriticalSecret Patternskills/vds-skill/vds-scripts/scripts/dev/cli_smoke.sh
CriticalSecret Patternskills/vds-skill/vds-scripts/scripts/dev/cli_smoke.sh
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processpackages/core/dist/isolation/workspace-manager.js
HighShell
HighRuntime Package Installskills/sdlc/install-deps.mjs
HighShips High Entropy Blobskills/vds-skill/vds-scripts/pdf_orchestrator/cli_verification_test/test.pdf
Affected versions and remediation
This report applies to @ngocsangairvds/vsaf@6.11.0.
See all versions of @ngocsangairvds/vsaf for other recorded verdicts.
- Review the evidence and your use of @ngocsangairvds/vsaf@6.11.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.