@ngocsangairvds/vsaf@6.18.0
is it ready to use ?
AI Security Review
scanned 1mo ago · by lpm-firewall-aiScanner malware-similarity flags match this same VSAF CLI and skill tree, not a hidden payload. npm postinstall only symlinks @vsaf/core; Claude and Cursor config changes require the user to run vsaf install or vsaf init.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
npm install runs the symlink postinstall; vsaf install and vsaf init run only as explicit CLI commands.
Impact
No unconsented install-time hijack of a foreign agent was found. Running the CLI can change project agent config as the product describes.
Mechanism
user-invoked skill-pack installer for AI coding agents
AI rationale
Scanner malware-similarity flags match this same VSAF CLI and skill tree, not a hidden payload. npm postinstall only symlinks @vsaf/core; Claude and Cursor config changes require the user to run vsaf install or vsaf init.
Evidence
node_modules/@vsaf/core.claude/settings.json.claude/hooks.claude/skills.cursor/skills.vsaf/config.yaml.vsaf/.claude-session
Network endpoints3
ai-gateway.viettel.digitallangfuse.viettel.digitalbitbucket.digital.vn/scm/vcoding/vsaf-workflow.git
Decision evidence
public snapshotAI called this Suspicious at 84.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- npm postinstall runs inline Node that creates node_modules/@vsaf/core as a local symlink.
- The vsaf install command is documented to deploy skill packs into .claude/skills in the current project.
- deployHooks copies pack hook scripts and merges them into .claude/settings.json.
- The installer also mirrors skills into .cursor/skills and can add a Claude SessionStart hook.
- A credentials helper reads BITBUCKET_TOKEN and the git credential helper for Bitbucket API and clone use.
- The workflow engine runs bash node content with child_process.exec when a user starts a run.
Evidence against
- postinstall does not write Claude, Cursor, MCP, or other foreign agent config files.
- Agent-surface writes run only after explicit vsaf install or vsaf init, not on require of the library main.
- Network hosts in the CLI are Viettel and Bitbucket product endpoints, not anonymous droppers.
- package.json has no runtime self-dependency on another vsaf release.
- packages/core/dist/index.js only re-exports engine APIs and has no import-time side effects.
- High scanner hits are source similarity to this same VSAF CLI and skill packs, not a hidden staged payload.
Source & flagged code
28 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node -e "const fs=require('fs'),p=require('path'),r=p.resolve;const d=r(process.cwd(),'node_modules','@vsaf');fs.mkdirSync(d,{recursive:true});const t=r(d,'core'),src=r(process.cwd...
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node -e "const fs=require('fs'),p=require('path'),r=p.resolve;const d=r(process.cwd(),'node_modules','@vsaf');fs.mkdirSync(d,{recursive:true});const t=r(d,'core'),src=r(process.cwd...
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgskills/vds-skill/vds-scripts/pdf_orchestrator/tests/conftest.pyView file
194patternName = aws_access_key
severity = critical
line = 194
Findings
5 Critical20 High7 Medium5 Low
CriticalCritical Secretskills/vds-skill/vds-scripts/pdf_orchestrator/tests/conftest.py
CriticalSecret Patternskills/vds-skill/vds-scripts/pdf_orchestrator/tests/conftest.py
CriticalSecret Patternskills/vds-skill/vds-scripts/pdf_orchestrator/tests/conftest.py
CriticalSecret Patternskills/vds-skill/vds-scripts/scripts/dev/cli_smoke.sh
CriticalSecret Patternskills/vds-skill/vds-scripts/scripts/dev/cli_smoke.sh
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processpackages/core/dist/isolation/workspace-manager.js
HighShell
HighRuntime Package Installskills/sdlc/install-deps.mjs
HighShips High Entropy Blobskills/vds-skill/vds-scripts/pdf_orchestrator/cli_verification_test/test.pdf
Affected versions and remediation
This report applies to @ngocsangairvds/vsaf@6.18.0.
See all versions of @ngocsangairvds/vsaf for other recorded verdicts.
- Review the evidence and your use of @ngocsangairvds/vsaf@6.18.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.