@passioncode-ai/fabric-agent-adapter@0.5.2
Create Fabric-compatible agents, run them as always-alive local services with dashboards (fabric-service/0.1), and adapt existing projects to the Fabric Agent Contract. This package is the installer CLI.
AI Security Review
scanned 25d ago · by lpm-firewall-aiThe package has no install lifecycle hook; agent skill installation occurs through an explicit CLI command. This is a guarded, package-owned setup capability, so it warrants a warning but the inspected source does not show an attack.
Static reason
No blocking static signals were detected.
Trigger
A user invokes the package CLI, optionally choosing the Claude target or --force.
Impact
The copied skills become available to compatible agents. No confirmed malicious behavior was identified in the inspected source.
Mechanism
The command copies package-owned skill directories to ~/.agents/skills or ~/.claude/skills; without --force, it skips existing destinations.
AI rationale
The package has no install lifecycle hook; agent skill installation occurs through an explicit CLI command. This is a guarded, package-owned setup capability, so it warrants a warning but the inspected source does not show an attack.
Evidence
bin/fabric-agent-adapter.js~/.agents/skills~/.claude/skills
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The manifest exposes a CLI and declares no install lifecycle hook.
- The CLI checks for the matching Claude plugin and blocks copying skills into Claude’s skill directory when that plugin is installed.
- Running the CLI explicitly copies bundled skills into the shared agent skills hub, or into Claude’s skills directory when selected; existing copies are skipped unless --force is supplied.
- The source search found no fetch calls or environment-variable references in the CLI.
Evidence against
- The CLI’s explicit skill installation changes agent-visible configuration by copying package-owned skill files into shared agent directories.
Behavioral surface
CryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggedbin/fabric-agent-adapter.jsView file
•Runtime or CLI code links a write operation to an explicit external AI-agent control path:
backup = path.join(home, '.claude', 'sk[redacted]', `${name}-${date.now()}`);
fs.mkdirsync(path.dirname(backup), { recursive: true });
fs.renamesync(shadow, backup);
console.log(`removed shadowing ${info.issymboliclink() ? 'link' : 'copy'} ${shadow} (kept at ${backup})`);
removed += 1;
}
if (!removed) console.log('no shadowing copies found.');
}
function main(argv) {
const args = argv.slice(2);
if (args.includes('--help') || args.includes('-h')) {
usage();
return 0;
}
const force = args.includes('--force');
const prune = args.includes('--prune-shadow');
let target = 'agents';
const known = new set(['--force', '--prune-shadow']);
const unknown = [];
for (
High
External Ai Agent Control Surface Mutation
Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.
bin/fabric-agent-adapter.jsView on unpkg•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation.
#!/usr/bin/env node
'use strict';
const fs = require('fs');
const path = require('path');
const os = require('os');
const root = path.resolve(__dirname, '..');
const repo = 'passioncode-ai/fabric-agent-adapter';
const plugin_id = 'fabr
Findings
2 High6 Medium4 Low
HighExternal Ai Agent Control Surface Mutationbin/fabric-agent-adapter.js
HighTrigger Reachable External Ai Agent Control Surface Mutationbin/fabric-agent-adapter.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperplugins/fabric-agent-adapter/skills/adapting-projects-to-fabric/scripts/fabric_provider.py
MediumSuspicious Lifecycle Evidencepackage.json
MediumAi Review Evidencebin/fabric-agent-adapter.js
MediumAi Review Evidencebin/fabric-agent-adapter.js
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @passioncode-ai/fabric-agent-adapter@0.5.2.
See all versions of @passioncode-ai/fabric-agent-adapter for other recorded verdicts.
- Review the evidence and your use of @passioncode-ai/fabric-agent-adapter@0.5.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.