Loading npm security reports…

@routerhub/agent-rules@1.5.241: AI-agent control-surface risk | LPM Firewall

registry / @routerhub/agent-rules / 1.5.241

@routerhub/agent-rules@1.5.241

Shared Copilot agent rules and guidelines for RouterHub projects

AI Security Review

scanned 11d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. An npm postinstall hook mutates the consumer project's package-manager settings and AI-agent control files. It also establishes a Git hook for future automatic synchronization.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

Installing or updating the package runs postinstall automatically.

Impact

The package can change broad project AI-agent behavior and preserve those changes without an explicit user command.

Mechanism

The lifecycle script alters .npmrc, starts initialization, writes agent instruction locations, and installs a post-checkout hook.

Policy narrative

Registry installation automatically invokes the lifecycle script. That script changes project package-manager behavior to favor repeat lifecycle execution, then starts initialization in the consumer project. Initialization writes AI-agent instruction and skill locations and installs a Git post-checkout hook that can resynchronize content later. These are unconsented mutations of broad agent control surfaces and persistence-related project configuration.

AI rationale

The automatic lifecycle chain changes consumer package-manager settings and broad AI-agent control surfaces, then installs a Git hook. This meets the policy threshold for an unconsented install-time control-surface mutation.

Evidence

package.jsonpostinstall.jsmerge.js.npmrcAGENTS.mdCLAUDE.md.github/copilot-instructions.md.github/instructions/.claude/skills/

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

postinstall.jsView file

•matchType = normalized_sha256 matchedPackage = @routerhub/agent-rules@1.5.235 matchedPath = postinstall.js matchedIdentity = npm:QHJvdXRlcmh1Yi9hZ2VudC1ydWxlcw:1.5.235 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

postinstall.jsView on unpkg

2L3: const { spawn } = require("child_process"); L4: const path = require("path");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

postinstall.jsView on unpkg · L2

scripts/agent-browser-cleanup.shView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

scripts/agent-browser-cleanup.shView on unpkg

•path = scripts/agent-browser-cleanup.sh kind = build_helper sizeBytes = 4442 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/agent-browser-cleanup.shView on unpkg

skills/screenshot-annotate/annotate.cjsView file

•matchType = normalized_sha256 matchedPackage = @routerhub/agent-rules@1.5.235 matchedPath = skills/screenshot-annotate/annotate.cjs matchedIdentity = npm:QHJvdXRlcmh1Yi9hZ2VudC1ydWxlcw:1.5.235 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

skills/screenshot-annotate/annotate.cjsView on unpkg

Source & flagged code

7 flagged

package.jsonView file

Lines 10-48json

10 "files": [

11 "AGENTS.base.md",

12 "rules/",

13 "skills/",

14 "scripts/agent-browser-cleanup.sh",

15 "merge.js",

16 "AGENTS.private.example.md",

17 "PULL_REQUEST_TEMPLATE.md",

18 "postinstall.js",

19 "package.json",

20 "CHANGELOG.md",

21 "enabled-users.json"

22 ],

23 "scripts": {

24 "build": "node --check merge.js && node --check postinstall.js",

25 "test:postinstall-init": "node tests/postinstall-init.test.js",

26 "merge": "node merge.js",

27 "sync": "node merge.js sync",

28 "init": "node merge.js init",

29 "watch": "node merge.js watch",

30 "postinstall": "node postinstall.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L30

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L30

31 },

32 "repository": {

33 "type": "git",

34 "url": "git+https://github.com/PomexAITeam/agent-rules.git"

35 },

36 "keywords": [

37 "copilot",

38 "agent",

39 "rules",

40 "guidelines"

41 ],

42 "author": "RouterHub Team",

43 "license": "MIT",

44 "engines": {

45 "node": ">=16.0.0"

46 }

47}

48

postinstall.jsView file

Lines 1-22javascript

1#!/usr/bin/env node

2

3const { spawn } = require("child_process");

4const path = require("path");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

postinstall.js

scripts/agent-browser-cleanup.shView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

scripts/agent-browser-cleanup.shView on unpkg

•path = scripts/agent-browser-cleanup.sh kind = build_helper sizeBytes = 4442 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/agent-browser-cleanup.shView on unpkg

skills/screenshot-annotate/annotate.cjsView file

•matchType = normalized_sha256 matchedPackage = @routerhub/agent-rules@1.5.235 matchedPath = skills/screenshot-annotate/annotate.cjs matchedIdentity = npm:QHJvdXRlcmh1Yi9hZ2VudC1ydWxlcw:1.5.235 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

skills/screenshot-annotate/annotate.cjsView on unpkg