registry / @rowansenne/docnexus / 0.18.0
@rowansenne/docnexus@0.18.0
[English README](./README.md)
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe manifest has no install lifecycle hook, and agent configuration changes are tied to explicit project setup or linking. The inspected writes are scoped to DocNexus project skills and a marked project instruction block, so the scanner hints do not establish an attack.
Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user runs project initialization with an agent target or invokes the skills-link command; reset requires --force.
Impact
No confirmed unauthorized control-surface change, credential transfer, or other attack was established.
Mechanism
The package links its own workspace skills and adds or refreshes a marked DocNexus block in the project instruction file. Reset checks for force and a DocNexus workspace marker.
AI rationale
The manifest has no install lifecycle hook, and agent configuration changes are tied to explicit project setup or linking. The inspected writes are scoped to DocNexus project skills and a marked project instruction block, so the scanner hints do not establish an attack.
Evidence
package.jsondist/src/agent-context.jsdist/src/cli.jsdist/src/reset.jsdist/src/skills.js
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes the CLI and lists prepack as a build step; it has no install lifecycle hook.
- Agent skill links target project-local .agents/skills or .claude/skills directories.
- Agent context updates are reached through the skills-link path and replace or add only the marked DocNexus block in a project instruction file.
- CLI initialization defaults to no agent targets; agent linking requires an explicit target, and reset requires --force.
- Skill synchronization copies files into the project-local docnexus/skills workspace.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
6 flagged · loading sourcedist/src/skills.jsView file
•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation.
import { existssync, readfilesync } from "node:fs";
import { cp, lstat, mkdir, readfile, readlink, rm, stat, symlink, writefile } from "node:fs/promises";
import { installagentcontext } from "./agent-context.js";
import { dirname, join, relative, resolve } from "node:path";
import { fileurltopath } from "node:url";
import { skillspath, workspace_dirname } from "./layout.js";
export const sk[redacted] = ["claude", "codex"];
export const skill_names = [
"docnexus",
"docnexus-extract",
"docnexus-ingest",
"docnexus-recall",
"docnexus-library",
"docnexus-maintain"
];
c
High
Trigger Reachable External Ai Agent Control Surface Mutation
Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.
dist/src/skills.jsView on unpkg24".claude", "skills");
}
export function parseSkillsTargets(value) {
if (value === "all") {
return [...SKILLS_TARGETS];
}
if (value === "codex" || value === "cla
Low
Ai Review Evidence
Agent skill links target project-local .agents/skills or .claude/skills directories.
dist/src/skills.jsView on unpkg · L24Findings
2 High2 Medium8 Low
HighTrigger Reachable External Ai Agent Control Surface Mutationdist/src/skills.js
HighPrevious Version Dangerous Deltadist/src/reset.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencedist/src/skills.js
LowAi Review Evidencedist/src/agent-context.js
LowAi Review Evidencedist/src/agent-context.js
Affected versions and remediation
This report applies to @rowansenne/docnexus@0.18.0.
See all versions of @rowansenne/docnexus for other recorded verdicts.
- Review the evidence and your use of @rowansenne/docnexus@0.18.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.