@rosetears/aili-pi: AI-agent policy block | LPM Firewall

Loading npm security reports…

@rosetears/aili-pi: AI-agent policy block | LPM Firewall

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/sync-global-skills.mjs --if-pi-managed

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/sync-global-skills.mjs --if-pi-managed

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

extensions/zentui/runtime.tsView file

1import { execFile } from "node:child_process"; L2: import { existsSync, readdirSync, statSync } from "node:fs";

High

Child Process

Package source references child process execution.

extensions/zentui/runtime.tsView on unpkg · L1

skills/minimax-pdf/scripts/render_cover.jsView file

61const { spawnSync } = require("child_process"); L62: const r = spawnSync("npx", ["playwright", "install", "chromium"], { stdio: "inherit", shell: true }); L63: if (r.status !== 0) {

High

Shell

Package source references shell execution.

skills/minimax-pdf/scripts/render_cover.jsView on unpkg · L61

37function loadPlaywright() { L38: const { execSync } = require("child_process"); L39: try { return require("playwright"); } catch (_) {} ... L46: error: "playwright not found", L47: hint: "Run: npm install -g playwright && npx playwright install chromium" L48: }));

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

skills/minimax-pdf/scripts/render_cover.jsView on unpkg · L37

11L12: const path = require("path"); L13: const fs = require("fs");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

skills/minimax-pdf/scripts/render_cover.jsView on unpkg · L11

install.shView file

•path = install.sh kind = build_helper sizeBytes = 120 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

install.shView on unpkg

src/vendor/pi-permission-modes/index.tsView file

•matchType = previous_version_dangerous_delta matchedPackage = @rosetears/aili-pi@0.1.6 matchedIdentity = npm:QHJvc2V0ZWFycy9haWxpLXBp:0.1.6 similarity = 0.862 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/vendor/pi-permission-modes/index.tsView on unpkg

Source & flagged code

8 flagged

package.jsonView file

Lines 40-80json

40 "./extensions/zentui/index.ts"

41 ],

42 "skills": [

43 "./node_modules/pi-web-access/skills"

44 ],

45 "prompts": [

46 "./prompts/ideate.md",

47 "./prompts/define.md",

48 "./prompts/build.md",

49 "./prompts/ship.md",

50 "./prompts/local-review.md"

51 ],

52 "themes": [

53 "./themes/rose-cyberdeck.json"

54 ]

55 },

56 "engines": {

57 "node": ">=22.19.0"

58 },

59 "scripts": {

60 "postinstall": "node scripts/sync-global-skills.mjs --if-pi-managed",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L60

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L60

61 "typecheck": "tsc --noEmit",

62 "test": "vitest run",

63 "sync:skills": "node --experimental-strip-types scripts/sync-skills.ts",

64 "verify:skills": "node --experimental-strip-types scripts/sync-skills.ts --verify",

65 "validate:skills": "npm run verify:skills",

66 "sync:roles": "node --experimental-strip-types scripts/sync-roles.ts",

67 "verify:roles": "node --experimental-strip-types scripts/sync-roles.ts --verify",

68 "validate:roles": "npm run verify:roles",

69 "sync:adapters": "node --experimental-strip-types scripts/apply-adapter-evidence.ts",

70 "validate:compatibility": "node --experimental-strip-types scripts/apply-adapter-evidence.ts --verify",

71 "sync:permission-modes": "node --experimental-strip-types scripts/sync-permission-modes.ts",

72 "verify:permission-modes": "node --experimental-strip-types scripts/sync-permission-modes.ts --verify",

73 "generate:provenance": "node --experimental-strip-types scripts/sync-permission-modes.ts --verify && node --experimental-strip-types scripts/generate-provenance.ts",

74 "validate:provenance": "node --experimental-strip-types scripts/sync-permission-modes.ts --verify && node --experimental-strip-types scripts/generate-provenance.ts --verify",

75 "validate:capabilities": "node --experimental-strip-types scripts/validate-runtime.ts",

76 "validate:release": "node --experimental-strip-types scripts/validate-runtime.ts --release",

77 "test:doctor": "vitest run tests/unit/doctor.test.ts",

78 "test:bootstrap": "vitest run tests/bootstrap/bootstrap.test.ts",

79 "test:integration": "vitest run tests/integration",

80 "test:audit-redaction": "vitest run tests/unit/permissions.test.ts tests/unit/subagents.test.ts",

extensions/zentui/runtime.tsView file

Lines 1-21typescript

1import { execFile } from "node:child_process";

2import { existsSync, readdirSync, statSync } from "node:fs";

High

Child Process

Package source references child process execution.

extensions/zentui/runtime.tsView on unpkg · L1

3import { join } from "node:path";

4

skills/minimax-pdf/scripts/render_cover.jsView file

Lines 1-81javascript

1#!/usr/bin/env node

2/**

3 * render_cover.js — Render cover.html → cover.pdf via Playwright.

4 *

5 * Usage:

6 * node render_cover.js --input cover.html --out cover.pdf

7 * node render_cover.js --input cover.html --out cover.pdf --wait 1200

8 *

9 * Exit codes: 0 success, 1 bad args, 2 dependency missing, 3 render error

10 */

11

install.shView file

•path = install.sh kind = build_helper sizeBytes = 120 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

install.shView on unpkg

src/vendor/pi-permission-modes/index.tsView file

•matchType = previous_version_dangerous_delta matchedPackage = @rosetears/aili-pi@0.1.6 matchedIdentity = npm:QHJvc2V0ZWFycy9haWxpLXBp:0.1.6 similarity = 0.862 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/vendor/pi-permission-modes/index.tsView on unpkg