@optima-chat/dev-skills@0.16.3: AI-agent control-surface risk | LPM Firewall

Loading npm security reports…

@optima-chat/dev-skills@0.16.3: AI-agent control-surface risk | LPM Firewall

Source & flagged code

15 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/install.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/install.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/helpers/query-db.tsView file

2L3: import { execSync } from 'child_process'; L4: import * as fs from 'fs'; ... L97: // 1. 优先从 PATH 中查找 L98: const whichCmd = process.platform === 'win32' ? 'where psql' : 'which psql'; L99: try { ... L133: : process.platform === 'win32' L134: ? 'Download from https://www.postgresql.org/download/windows/' L135: : 'sudo apt install postgresql-client'; ... L146: encoding: 'utf-8', L147: env: { ...process.env, PGPASSWORD: password } L148: }

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

bin/helpers/query-db.tsView on unpkg · L2

16patternName = generic_password severity = medium line = 16 matchedText = ci: { co...' },

Medium

Secret Pattern

Package contains a possible secret pattern.

bin/helpers/query-db.tsView on unpkg · L16

21patternName = generic_password severity = medium line = 21 matchedText = ci: { co...' },

Medium

Secret Pattern

Hardcoded password in bin/helpers/query-db.ts

bin/helpers/query-db.tsView on unpkg · L21

26patternName = generic_password severity = medium line = 26 matchedText = ci: { co...' },

Medium

Secret Pattern

Hardcoded password in bin/helpers/query-db.ts

bin/helpers/query-db.tsView on unpkg · L26

bin/helpers/infisical-secrets.tsView file

1import { execSync } from 'child_process'; L2: import { getInfisicalConfig, getInfisicalToken, InfisicalConfig } from './db-utils';

High

Child Process

Package source references child process execution.

bin/helpers/infisical-secrets.tsView on unpkg · L1

bin/helpers/db-utils.tsView file

280// fd 随 bash 进程退出自动关闭。 L281: execSync(`bash -c 'exec 3<>/dev/tcp/127.0.0.1/${localPort}'`, { stdio: 'ignore', timeout: 2000 }); L282: return true;

High

Shell

Package source references shell execution.

bin/helpers/db-utils.tsView on unpkg · L280

bin/helpers/logs.ts#virtual:normalized:round1View file

119function stripQuoted(q: string): string { L120: return q.replace(/"(?:[^"\\]|\\.)*"/g, ' ');\n}\n\n/**\n * 带分析语句(SQL)的 query 用 `|` 分隔检索与分析两段。SLS 明确规定此时\n * line/offset 失效、要用 SQL 自己的 LIMIT 翻页 —— 这种 query 不能按页累加。\n *\n * 只看有没有 `|`... L121: }

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

bin/helpers/logs.ts#virtual:normalized:round1View on unpkg · L119

scripts/install.jsView file

6L7: const CLAUDE_DIR = path.join(os.homedir(), '.claude'); L8: const SKILLS_SOURCE = path.join(__dirname, '..', '.claude'); L9: const CODEX_DIR = process.env.CODEX_HOME L10: ? path.resolve(process.env.CODEX_HOME) L11: : path.join(os.homedir(), '.codex'); L12: const CODEX_SOURCE = path.join(__dirname, '..', '.codex'); L13: const COMMANDS_DEST = path.join(CLAUDE_DIR, 'commands'); ... L36: if (!fs.existsSync(dest)) { L37: fs.mkdirSync(dest, { recursive: true }); L38: } ... L43: } else {

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/install.jsView on unpkg · L6

dist/bin/helpers/logs.js#virtual:normalized:round1View file

117Trigger-reachable command-output exfiltration chain: manifest.bin -> dist/bin/helpers/logs.js L117: function stripQuoted(q) { L118: return q.replace(/"(?:[^"\\]|\\.)*"/g, ' ');\n}\n/**\n * 带分析语句(SQL)的 query 用 `|` 分隔检索与分析两段。SLS 明确规定此时\n * line/offset 失效、要用 SQL 自己的 LIMIT 翻页 —— 这种 query 不能按页累加。\n *\n * 只看有没有 `|` 会... L119: }

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/bin/helpers/logs.js#virtual:normalized:round1View on unpkg · L117

dist/bin/helpers/db-utils.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @optima-chat/dev-skills@0.14.0 matchedIdentity = npm:QG9wdGltYS1jaGF0L2Rldi1za2lsbHM:0.14.0 similarity = 0.868 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/bin/helpers/db-utils.jsView on unpkg

dist/bin/helpers/query-db.jsView file

44patternName = generic_password severity = medium line = 44 matchedText = ci: { co...' },

Medium

Secret Pattern

Hardcoded password in dist/bin/helpers/query-db.js

dist/bin/helpers/query-db.jsView on unpkg · L44

49patternName = generic_password severity = medium line = 49 matchedText = ci: { co...' },

Medium

Secret Pattern

Hardcoded password in dist/bin/helpers/query-db.js

dist/bin/helpers/query-db.jsView on unpkg · L49

54patternName = generic_password severity = medium line = 54 matchedText = ci: { co...' },

Medium

Secret Pattern

Hardcoded password in dist/bin/helpers/query-db.js

dist/bin/helpers/query-db.jsView on unpkg · L54

Source & flagged code

15 flagged

package.jsonView file

Lines 5-45json

5 "main": "index.js",

6 "bin": {

7 "optima-dev-skills": "bin/cli.js",

8 "optima-account": "dist/bin/helpers/account.js",

9 "optima-entitlement": "dist/bin/helpers/entitlement.js",

10 "optima-generate-test-token": "dist/bin/helpers/generate-test-token.js",

11 "optima-grant-credits": "dist/bin/helpers/grant-credits.js",

12 "optima-grant-balance": "dist/bin/helpers/grant-credits.js",

13 "optima-grant-subscription": "dist/bin/helpers/grant-subscription.js",

14 "optima-logs": "dist/bin/helpers/logs.js",

15 "optima-plugin": "dist/bin/helpers/plugin.js",

16 "optima-discount": "dist/bin/helpers/discount.js",

17 "optima-product": "dist/bin/helpers/product.js",

18 "optima-query-db": "dist/bin/helpers/query-db.js",

19 "optima-show-env": "dist/bin/helpers/show-env.js",

20 "optima-verify-health": "dist/bin/helpers/verify-health.js",

21 "optima-cn-deploy": "dist/bin/helpers/cn-deploy.js",

22 "optima-gateway-admin": "dist/bin/helpers/gateway-admin.js"

23 },

24 "scripts": {

25 "postinstall": "node scripts/install.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L25

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L25

26 "build": "tsc",

27 "prepare": "npm run build",

28 "pretest": "npm run build",

29 "test": "node --test tests/*.test.js"

30 },

31 "keywords": [

32 "claude-code",

33 "skills",

34 "optima",

35 "devops",

36 "logs",

37 "aws",

38 "cloudwatch"

39 ],

40 "author": "Optima AI Team",

41 "license": "MIT",

42 "repository": {

43 "type": "git",

44 "url": "git+https://github.com/Optima-Chat/optima-dev-skills.git"

45 },

bin/helpers/query-db.tsView file

Lines 1-36typescript

1#!/usr/bin/env node

2

3import { execSync } from 'child_process';

4import * as fs from 'fs';

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

bin/helpers/query-db.tsView on unpkg · L2

bin/helpers/infisical-secrets.tsView file

Lines 1-21typescript

1import { execSync } from 'child_process';

2import { getInfisicalConfig, getInfisicalToken, InfisicalConfig } from './db-utils';

High

Child Process

Package source references child process execution.

bin/helpers/infisical-secrets.tsView on unpkg · L1

3

4/**

5 * Fetch a single secret value from Infisical given env + path + name.

bin/helpers/db-utils.tsView file

Lines 260-300typescript

260 } catch {

261 return false;

262 }

263}

264

265function portPids(localPort: number):

bin/helpers/logs.ts#virtual:normalized:round1View file

119function stripQuoted(q: string): string { L120: return q.replace(/"(?:[^"\\]|\\.)*"/g, ' ');\n}\n\n/**\n * 带分析语句(SQL)的 query 用 `|` 分隔检索与分析两段。SLS 明确规定此时\n * line/offset 失效、要用 SQL 自己的 LIMIT 翻页 —— 这种 query 不能按页累加。\n *\n * 只看有没有 `|`... L121: }

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

bin/helpers/logs.ts#virtual:normalized:round1View on unpkg · L119

scripts/install.jsView file

Lines 1-26javascript

1#!/usr/bin/env node

2

3const fs = require('fs');

4const path = require('path');

5const os

dist/bin/helpers/logs.js#virtual:normalized:round1View file

117Trigger-reachable command-output exfiltration chain: manifest.bin -> dist/bin/helpers/logs.js L117: function stripQuoted(q) { L118: return q.replace(/"(?:[^"\\]|\\.)*"/g, ' ');\n}\n/**\n * 带分析语句(SQL)的 query 用 `|` 分隔检索与分析两段。SLS 明确规定此时\n * line/offset 失效、要用 SQL 自己的 LIMIT 翻页 —— 这种 query 不能按页累加。\n *\n * 只看有没有 `|` 会... L119: }

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/bin/helpers/logs.js#virtual:normalized:round1View on unpkg · L117

dist/bin/helpers/db-utils.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @optima-chat/dev-skills@0.14.0 matchedIdentity = npm:QG9wdGltYS1jaGF0L2Rldi1za2lsbHM:0.14.0 similarity = 0.868 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/bin/helpers/db-utils.jsView on unpkg

dist/bin/helpers/query-db.jsView file

44patternName = generic_password severity = medium line = 44 matchedText = ci: { co...' },

Medium

Secret Pattern

Hardcoded password in dist/bin/helpers/query-db.js

dist/bin/helpers/query-db.jsView on unpkg · L44

49patternName = generic_password severity = medium line = 49 matchedText = ci: { co...' },

Medium

Secret Pattern

Hardcoded password in dist/bin/helpers/query-db.js

dist/bin/helpers/query-db.jsView on unpkg · L49

54patternName = generic_password severity = medium line = 54 matchedText = ci: { co...' },

Medium

Secret Pattern

Hardcoded password in dist/bin/helpers/query-db.js

dist/bin/helpers/query-db.jsView on unpkg · L54