Loading npm security reports…

@routerhub/agent-rules@1.5.154: AI-agent control-surface risk | LPM Firewall

registry / @routerhub/agent-rules / 1.5.154

@routerhub/agent-rules@1.5.154

Shared Copilot agent rules and guidelines for RouterHub projects

AI Security Review

scanned 11d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. npm install runs postinstall.js, which rewrites the consumer .npmrc so lifecycle scripts stay enabled and then generates agent instruction files and Claude skills in the project root.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

Automatic npm postinstall when the package is installed.

Impact

The install changes the consumer package-manager policy and replaces broad AI-agent instruction and skill surfaces without a separate user command.

Mechanism

postinstall.js appends package-manager settings and spawns merge.js init, which writes AGENTS.md, CLAUDE.md, Copilot instructions, a PR template, and copies skills into .claude/skills.

Policy narrative

Installing @routerhub/agent-rules runs postinstall.js. That script finds the consumer project and appends .npmrc settings that disable a frozen lockfile, force dependency lifecycle scripts, and disable the side-effects cache. It then runs merge.js init, which writes AGENTS.md, CLAUDE.md, Copilot instruction files, and a pull-request template, and copies the bundled skills into .claude/skills. Those files are loaded by Cursor, Claude Code, and Copilot, so the install changes agent behavior and keeps later install hooks active.

AI rationale

The postinstall hook unconditionally mutates the consumer .npmrc and writes several foreign agent instruction and skill locations. That is an unconsented install-time takeover of a broad AI-agent control surface.

Evidence

package.jsonpostinstall.jsmerge.js.npmrcAGENTS.mdCLAUDE.mdAGENTS.private.md.github/copilot-instructions.md

Source & flagged code

6 flagged

package.jsonView file

Lines 8-46json

8 },

9 "files": [

10 "AGENTS.base.md",

11 "rules/",

12 "skills/",

13 "merge.js",

14 "AGENTS.private.example.md",

15 "PULL_REQUEST_TEMPLATE.md",

16 "README.zh-CN.md",

17 "postinstall.js",

18 "package.json",

19 "CHANGELOG.md"

20 ],

21 "scripts": {

22 "build": "node --check merge.js && node --check postinstall.js",

23 "test:postinstall-init": "node tests/postinstall-init.test.js",

24 "merge": "node merge.js",

25 "sync": "node merge.js sync",

26 "init": "node merge.js init",

27 "watch": "node merge.js watch",

28 "postinstall": "node postinstall.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L28

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L28

29 },

High

Suspicious Lifecycle Evidence

package.json registers a postinstall script that runs node postinstall.js during npm install.

package.jsonView on unpkg · L28

30 "repository": {

31 "type": "git",

32 "url": "git+https://github.com/PomexAITeam/agent-rules.git"

33 },

34 "keywords": [

35 "copilot",

36 "agent",

37 "rules",

38 "guidelines"

39 ],

40 "author": "RouterHub Team",

41 "license": "MIT",

42 "engines": {

43 "node": ">=16.0.0"

44 }

45}

46

skills/loop-review/scripts/save-review-decision.shView file

•path = skills/loop-review/scripts/save-review-decision.sh kind = build_helper sizeBytes = 2323 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

skills/loop-review/scripts/save-review-decision.shView on unpkg

postinstall.jsView file

•matchType = normalized_sha256 matchedPackage = @routerhub/agent-rules@1.5.224 matchedPath = postinstall.js matchedIdentity = npm:QHJvdXRlcmh1Yi9hZ2VudC1ydWxlcw:1.5.224 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

postinstall.jsView on unpkg

skills/screenshot-annotate/annotate.jsView file

•matchType = normalized_sha256 matchedPackage = @routerhub/agent-rules@1.5.224 matchedPath = skills/screenshot-annotate/annotate.cjs matchedIdentity = npm:QHJvdXRlcmh1Yi9hZ2VudC1ydWxlcw:1.5.224 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

skills/screenshot-annotate/annotate.jsView on unpkg