registry / @rowansenne/docnexus / 0.14.0
@rowansenne/docnexus@0.14.0
[English README](./README.md)
AI Security Review
scanned 7d ago · by lpm-firewall-aiThe package has no install lifecycle hook, and the agent configuration behavior is project-scoped and user-invoked. The source also specifies user consent before storing captured memory, so the configuration finding does not establish malicious behavior.
Static reason
No blocking static signals were detected.
Trigger
A user runs DocNexus initialization with an agent target or explicitly runs the skills link command.
Impact
This enables the project’s chosen agent to load DocNexus skills and project memory; the source does not establish unconsented broad agent configuration changes or an attack.
Mechanism
The CLI links bundled DocNexus skills from the project workspace and adds a marked DocNexus memory block to the selected project instruction file.
AI rationale
The package has no install lifecycle hook, and the agent configuration behavior is project-scoped and user-invoked. The source also specifies user consent before storing captured memory, so the configuration finding does not establish malicious behavior.
Evidence
CLAUDE.mdAGENTS.md.agents/skills.claude/skills
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest has no npm install lifecycle hook; its executable entry is the DocNexus CLI.
- Agent linking is optional during initialization and can also be requested through the explicit skills link command.
- The agent context targets project instruction files and asks the agent to offer memory capture, with storage requiring user consent.
- Skill links point into the project’s DocNexus workspace, and the context installer writes a marked block to the selected project instruction file.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
6 flagged · loading sourcedist/src/skills.jsView file
•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation.
import { existssync, readfilesync } from "node:fs";
import { cp, lstat, mkdir, readfile, readlink, rm, stat, symlink, writefile } from "node:fs/promises";
import { installagentcontext } from "./agent-context.js";
import { dirname, join, relative, resolve } from "node:path";
import { fileurltopath } from "node:url";
import { skillspath, workspace_dirname } from "./layout.js";
export const sk[redacted] = ["claude", "codex"];
export const skill_names = [
"docnexus",
"docnexus-extract",
"docnexus-ingest",
"docnexus-recall",
"docnexus-library",
"docnexus-maintain"
];
c
High
Trigger Reachable External Ai Agent Control Surface Mutation
Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.
dist/src/skills.jsView on unpkgpackage.jsonView file
33"bin": {
"docnexus": "dist/src/cli.js"
},
"scripts": {
"build": "node -e \"require('node:fs').rmSync('dist', { recursive: true, force: true })\" && tsc -p tsconfig.json && node -e \"require('node:fs').chmodSync('dist/src/cli.js', 0o755)\"",
"prepack": "npm run build",
"test": "vitest run",
"typecheck": "tsc -p tsconfig.json --noEmit",
"audit:prod": "npm audit --omit=dev --audit-level=high",
"e
Findings
1 High2 Medium9 Low
HighTrigger Reachable External Ai Agent Control Surface Mutationdist/src/skills.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencedist/src/cli.js
LowAi Review Evidencedist/src/cli.js
LowAi Review Evidencedist/src/agent-context.js
LowAi Review Evidencedist/src/agent-context.js
Affected versions and remediation
This report applies to @rowansenne/docnexus@0.14.0.
See all versions of @rowansenne/docnexus for other recorded verdicts.
- Review the evidence and your use of @rowansenne/docnexus@0.14.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.