@passioncode-ai/fabric-agent-adapter@0.5.0
Create Fabric-compatible agents, run them as always-alive local services with dashboards (fabric-service/0.1), and adapt existing projects to the Fabric Agent Contract. This package is the installer CLI.
AI Security Review
scanned 25d ago · by lpm-firewall-aiThe package provides an explicit CLI for installing its own skills into agent directories, a guarded agent setup capability. Because these configuration changes require user invocation, the source does not establish an automatic attack.
Static reason
No blocking static signals were detected.
Trigger
A user runs the fabric-agent-adapter CLI; --force permits replacing existing skill directories.
Impact
Agent skill configuration changes at the user level. No unconsented install-time mutation or other confirmed attack surface was established.
Mechanism
The CLI copies package-shipped skill files into ~/.agents/skills or, when selected, ~/.claude/skills; it checks for an installed Claude plugin before the Claude copy or shadow-pruning operation.
AI rationale
The package provides an explicit CLI for installing its own skills into agent directories, a guarded agent setup capability. Because these configuration changes require user invocation, the source does not establish an automatic attack.
Evidence
bin/fabric-agent-adapter.js~/.agents/skills~/.claude/skills
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- package.json defines a CLI entry point and has no install lifecycle hook.
- The CLI checks whether this package’s Claude plugin is installed before allowing certain operations.
- Running the CLI copies its shipped skills into user-level agent skill directories and can replace existing copies when --force is used.
Evidence against
- The agent configuration changes require explicit CLI invocation; the package does not perform them during npm installation.
- The CLI refuses to create a Claude skill copy when the corresponding plugin is installed, and skips existing destinations unless --force is supplied.
Behavioral surface
CryptoEnvironmentVarsFilesystemNetwork
UrlStrings
Source & flagged code
7 flaggedbin/fabric-agent-adapter.jsView file
•Runtime or CLI code links a write operation to an explicit external AI-agent control path:
backup = path.join(home, '.claude', 'sk[redacted]', `${name}-${date.now()}`);
fs.mkdirsync(path.dirname(backup), { recursive: true });
fs.renamesync(shadow, backup);
console.log(`removed shadowing ${info.issymboliclink() ? 'link' : 'copy'} ${shadow} (kept at ${backup})`);
removed += 1;
}
if (!removed) console.log('no shadowing copies found.');
}
function main(argv) {
const args = argv.slice(2);
if (args.includes('--help') || args.includes('-h')) {
usage();
return 0;
}
const force = args.includes('--force');
const prune = args.includes('--prune-shadow');
let target = 'agents';
const known = new set(['--force', '--prune-shadow']);
const unknown = [];
for (
High
External Ai Agent Control Surface Mutation
Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.
bin/fabric-agent-adapter.jsView on unpkg•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation.
#!/usr/bin/env node
'use strict';
const fs = require('fs');
const path = require('path');
const os = require('os');
const root = path.resolve(__dirname, '..');
const repo = 'passioncode-ai/fabric-agent-adapter';
const plugin_id = 'fabr
Findings
2 High7 Medium3 Low
HighExternal Ai Agent Control Surface Mutationbin/fabric-agent-adapter.js
HighTrigger Reachable External Ai Agent Control Surface Mutationbin/fabric-agent-adapter.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperplugins/fabric-agent-adapter/skills/adapting-projects-to-fabric/scripts/fabric_provider.py
MediumSuspicious Lifecycle Evidencepackage.json
MediumAi Review Evidencebin/fabric-agent-adapter.js
MediumAi Review Evidencebin/fabric-agent-adapter.js
MediumAi Review Evidencebin/fabric-agent-adapter.js
LowScripts Present
LowFilesystem
LowUrl Strings
Affected versions and remediation
This report applies to @passioncode-ai/fabric-agent-adapter@0.5.0.
See all versions of @passioncode-ai/fabric-agent-adapter for other recorded verdicts.
- Review the evidence and your use of @passioncode-ai/fabric-agent-adapter@0.5.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.