@riddance/env@0.10.2: AI-agent control-surface risk | LPM Firewall

Loading npm security reports…

@riddance/env@0.10.2: AI-agent control-surface risk | LPM Firewall

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = ([ -f ./bin/install.js ] || tsc) && node ./bin/install.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = ([ -f ./bin/install.js ] || tsc) && node ./bin/install.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

lib/npm.jsView file

1import { exec } from 'node:child_process'; L2: import { stat } from 'node:fs/promises';

High

Child Process

Package source references child process execution.

lib/npm.jsView on unpkg · L1

25const exitCode = await new Promise((resolve, reject) => { L26: const proc = exec('npm install --omit=optional', { cwd: path }, err => { L27: if (err) {

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

lib/npm.jsView on unpkg · L25

lib/git.jsView file

2export async function isClean(path) { L3: const changes = await execAsync(path, 'git status --short'); L4: return changes.length === 0;

High

Shell

Package source references shell execution.

lib/git.jsView on unpkg · L2

lib/agents.jsView file

1Install-time code directly mutates a foreign AI-agent control surface: L5: export const managedFiles = [ L6: 'CLAUDE.md', L7: 'AGENTS.md', L8: 'GEMINI.md', L9: '.github/copilot-instructions.md', L10: '.cursor/rules/', L11: '.continue/rules/', L12: '.claude/settings.local.json', L13: ]; ... L33: async function writeClaudeCode(path, sections, myself) { L34: const filePath = join(path, 'CLAUDE.md'); L35: if (sections.length === 0) { Write operation from lib/env.js: L51: await rm('template', { recursive: true, force: true }); L52: await mkdir('template'); L53: await Promise.all(dirs.map(dir => mkdir(join('template', dir), { recursive: true }))); ... L197: } L198: await mkdir(join(targetDir, '.git', 'info'), { recursive: true }); L199: await writeFile(path, sourceExtensions.map(ext => `*${ext}

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

lib/agents.jsView on unpkg · L1

Source & flagged code

6 flagged

package.jsonView file

Lines 24-64json

24 "eslint-plugin-n": "18.2.2",

25 "eslint-plugin-prefer-arrow-functions": "3.10.1",

26 "eslint-plugin-promise": "7.3.0",

27 "eslint-plugin-unicorn": "73.0.0",

28 "mocha": "12.0.0-rc.5",

29 "prettier": "3.9.6",

30 "source-map-support": "0.5.21",

31 "typescript": "6.0.3"

32 },

33 "devDependencies": {

34 "@types/eslint": "9.6.1",

35 "@types/eslint-plugin-prettier": "3.1.3",

36 "@types/source-map-support": "0.5.10"

37 },

38 "scripts": {

39 "prepare": "tsc && node ./bin/prepare.js",

40 "start": "npm run prepare && node ./bin/install.js && node ./bin/watch.js",

41 "prepack": "npm run prepare && node ./bin/build.js",

42 "prepublishOnly": "tsc && node ./bin/prepublish.js",

43 "postpublish": "node ./bin/sync.js",

44 "postinstall": "([ -f ./bin/install.js ] || tsc) && node ./bin/install.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L44

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L44

45 },

46 "files": [

47 "/*.js",

48 "**/lib/*.js",

49 "/template/**",

50 "/bin/install.js",

51 "instructions.md"

52 ],

53 "bin": {

54 "riddance-watch": "./bin/watch.js",

55 "riddance-build": "./bin/build.js",

56 "riddance-fix": "./bin/fix.js",

57 "riddance-prepublish": "./bin/prepublish.js",

58 "riddance-sync": "./bin/sync.js",

59 "riddance-uninstall": "./bin/uninstall.js"

60 },

61 "ai": {

62 "instructions": "./instructions.md"

63 },

64 "gitHead": "61cf31bb4a9e7fdde81bbec55099b8f24b046c4e"

lib/npm.jsView file

Lines 1-45javascript

1import { exec } from 'node:child_process';

2import { stat } from 'node:fs/promises';

High

Child Process

Package source references child process execution.

lib/npm.jsView on unpkg · L1

3import { join } from 'node:path';

4export

lib/git.jsView file

Lines 1-22javascript

1import { exec } from 'node:child_process';

2export async function isClean(path) {

3 const changes = await execAsync(path,

lib/agents.jsView file

Lines 1-21javascript

1import { mkdir, readdir, readFile, unlink, writeFile } from 'node:fs/promises';

2import { EOL } from 'node:os';

3import { join } from 'node:path';

4import { ensureUnlinked, isFileNotFound } from './fs.js';