registry / @ploomescrm/bridge / 1.1.4

@ploomescrm/bridge@1.1.4

Bridge de comunicação tipado e **agnóstico de transporte** entre uma aplicação host e os apps que ela embute — um `<iframe>` no web, uma `<WebView>` no mobile.

AI Security Review

scanned 6d ago · by lpm-firewall-ai

The postinstall hook automatically installs first-party agent guidance and modifies the consumer’s Claude configuration. The inspected guidance concerns bridge integration, so this supports a warning for agent extension lifecycle risk rather than a malicious verdict.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

Installing the package as a dependency runs its postinstall hook.

Impact

The instructions can influence later Claude Code sessions in the project; the inspected skill describes bridge integration guidance.

Mechanism

The setup script copies bundled extensions into .claude directories and imports the bundled CLAUDE.md into the consumer’s .claude/CLAUDE.md.

AI rationale

Evidence

package.jsonscripts/setup.mjsai-extensions/CLAUDE.mdai-extensions/skills/use-bridge/SKILL.md.claude/skills/ploomes-bridge-use-bridge/.claude/CLAUDE.md

Decision evidence

public snapshot

AI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

The package’s postinstall script runs scripts/setup.mjs.
The setup script identifies the consumer project root and runs when installed from node_modules.
The setup script copies package extension files into the consumer’s .claude directories.
When the package supplies a CLAUDE.md, the setup script adds an import to the consumer’s .claude/CLAUDE.md.
The installed skill provides instructions for integrating the bridge into host and embedded applications.

Evidence against

Behavioral surface

Source

EnvironmentVarsFilesystem

Supply chain

Minified

Manifest

NoLicense

scanned 4 file(s), 29.7 KB of source

Source & flagged code

7 flagged

package.jsonView file

Lines 33-69json

33 "src": "ai-extensions"

34 },

35 "devDependencies": {

36 "@changesets/cli": "^2.31.0",

37 "@eslint/js": "^10.0.1",

38 "@vitest/coverage-v8": "^4.1.9",

39 "eslint": "^10.4.1",

40 "eslint-config-prettier": "^10.1.8",

41 "globals": "^17.6.0",

42 "happy-dom": "^20.10.6",

43 "prettier": "^3.8.4",

44 "tsdown": "^0.22.3",

45 "typescript": "^6.0.3",

46 "typescript-eslint": "^8.60.1",

47 "unrun": "^0.3.1",

48 "vite": "8.0.16",

49 "vitest": "^4.1.9"

50 },

51 "publishConfig": {

52 "access": "public"

53 },

54 "scripts": {

55 "postinstall": "node scripts/setup.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L55

56 "build": "tsdown",

57 "dev": "tsdown --watch",

Medium

Suspicious Lifecycle Evidence

The package’s postinstall script runs scripts/setup.mjs.

package.jsonView on unpkg · L53

58 "typecheck": "tsc --noEmit && tsc --noEmit -p tsconfig.consumer.json",

59 "test": "vitest run",

60 "test:watch": "vitest",

61 "test:coverage": "vitest run --coverage",

62 "lint": "eslint . --max-warnings 0",

63 "format": "prettier --write \"**/*.{ts,js,mjs,json,md,yaml,yml}\"",

64 "format:check": "prettier --check \"**/*.{ts,js,mjs,json,md,yaml,yml}\"",

65 "change": "changeset",

66 "version-packages": "changeset version",

67 "release": "pnpm build && changeset publish"

68 }

69}

scripts/setup.mjsView file

Lines 1-24javascript

1#!/usr/bin/env node

2/**

3 * postinstall — mirrors the extensions declared by the `ploomesAiExtensions`

4 * manifest in package.json into a consumer project's `.claude/`, each item

5 * prefixed so it coexists with the project's own content. Only acts when

6 * installed as a dependency; inert during local development.

7 *

8 * Claude Code only discovers skills that are direct children of

Medium

Ai Review Evidence

The setup script identifies the consumer project root and runs when installed from node_modules.

scripts/setup.mjsView on unpkg · L4

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/setup.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

53}, "scripts": { "postinstall": "node scripts/setup.mjs", "build": "tsdown", "dev": "tsdown --w

Medium

Suspicious Lifecycle Evidence

The package’s postinstall script runs scripts/setup.mjs.

package.jsonView on unpkg · L53

scripts/setup.mjsView file

3* postinstall — mirrors the extensions declared by the `ploomesAiExtensions` L4: * manifest in package.json into a consumer project's `.claude/`, each item L5: * prefixed so it coexists with the project's own content. Only acts when ... L8: * Claude Code only discovers skills that are direct children of L9: * `.claude/skills/` (i.e. `.claude/skills/<name>/SKILL.md`), so items are L10: * flattened with a prefix rather than nested under a namespace directory: ... L12: * ai-extensions/skills/use-bridge/SKILL.md L13: * -> .claude/skills/ploomes-bridge-use-bridge/SKILL.md L14: */ ... L16: import { L17: cpSync, L18: existsSync,

Findings

1 Critical1 High7 Medium3 Low

CriticalAi Agent Control Hijackscripts/setup.mjs

HighInstall Time Lifecycle Scriptspackage.json

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

MediumSuspicious Lifecycle Evidencepackage.json

MediumAi Review Evidencescripts/setup.mjs

LowScripts Present

LowFilesystem

LowNo License

Affected versions and remediation

This report applies to @ploomescrm/bridge@1.1.4.

See all versions of @ploomescrm/bridge for other recorded verdicts.

Review the evidence and your use of @ploomescrm/bridge@1.1.4 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-17 00:40:19.051Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Related packages

More from @ploomescrm

Behavioral surface

Related packages

More from @ploomescrm

Source & flagged code