@screenata/cli@0.5.0: AI-agent control-surface risk | LPM Firewall

Loading npm security reports…

@screenata/cli@0.5.0: AI-agent control-surface risk | LPM Firewall

Source & flagged code

9 flagged · loading source

package.jsonView file

•scripts.postinstall = node -e "const p='./dist/postinstall.js';require('fs').existsSync(p)&&import(p)"

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

•scripts.postinstall = node -e "const p='./dist/postinstall.js';require('fs').existsSync(p)&&import(p)"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/cli.jsView file

138async function performUpgrade(latest) { L139: const { execSync } = await import("child_process"); L140: console.log(`

High

Child Process

Package source references child process execution.

dist/cli.jsView on unpkg · L138

13106eps: "PostScript", L13107: ps1: "PowerShell", L13108: psd1: "PowerShell",

High

Shell

Package source references shell execution.

dist/cli.jsView on unpkg · L13106

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/cli.js: import { existsSync, readFileSync, writeFileSync, mkdirSync } from "fs"; import { createInterface } from "readline"; writeFileSync(CONFIG_FILE, JSON.stringify(config, null, 2), { mode: 384 }); import { readFileSync as readFileSync2, writeFileSync as writeFileSync2, existsSync as existsSync2 } from "fs"; writeFileSync2(CONFIG_PATH, lines.join(` Authorization: `Bearer ${this.config.accessToken}`, Authorization: `Bearer ${this.config.accessToken}`, var fs$writeFile = fs4.writeFile;

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/cli.jsView on unpkg

•Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior. dist/cli.js: import { existsSync, readFileSync, writeFileSync, mkdirSync } from "fs"; writeFileSync(CONFIG_FILE, JSON.stringify(config, null, 2), { mode: 384 }); var CLI_VERSION, NPM_REGISTRY_URL = "https://registry.npmjs.org/@screenata/cli/latest", CONFIG_DIR, CONFIG_FILE, CHECK_TIMEOUT_MS = 2000; import { readFileSync as readFileSync2, writeFileSync as writeFileSync2, existsSync as existsSync2 } from "fs"; writeFileSync2(CONFIG_PATH, lines.join(` var MIME_TYPES, CONFIG_PATH, DEFAULT_API_URL = "https://api.screenata.com"; var OES_CONTEXT = "https://openevidence.org/signing/v1"; if (!opts.allowHttp && !url.startsWith("https://")) {

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

dist/cli.jsView on unpkg

142try { L143: execSync(`npm install -g @screenata/cli@${latest}`, { stdio: "inherit" }); L144: console.log(`

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/cli.jsView on unpkg · L142

3877if (typeof callback !== "function") { L3878: callback = new Function("" + callback); L3879: }

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/cli.jsView on unpkg · L3877

dist/postinstall.jsView file

516"generate:public-skill": "bun run ./scripts/generate-public-skill.ts", L517: postinstall: `node -e "const p='./dist/postinstall.js';require('fs').existsSync(p)&&import(p)"`, L518: prepack: "bun run build"

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/postinstall.jsView on unpkg · L516

Source & flagged code

9 flagged

package.jsonView file

Lines 1-35json

1{

2 "name": "@screenata/cli",

3 "version": "0.5.0",

4 "description": "Screenata CLI — compliance workflows from your terminal",

5 "type": "module",

6 "license": "MIT",

7 "author": "DeepGuide AI <support@deepguide.ai>",

8 "bin": {

9 "screenata": "bin/screenata.js"

10 },

11 "files": [

12 "bin",

13 "dist",

14 "README.md"

15 ],

16 "scripts": {

17 "build": "bun build ./src/cli.ts --outfile ./dist/cli.js --target node && bun build ./src/postinstall.ts --outfile ./dist/postinstall.js --target node",

18 "dev": "bun run ./src/cli.ts",

19 "test": "vitest run",

20 "generate:public-skill": "bun run ./scripts/generate-public-skill.ts",

21 "postinstall": "node -e \"const p='./dist/postinstall.js';require('fs').existsSync(p)&&import(p)\"",

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg · L21

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L21

22 "prepack": "bun run build"

23 },

24 "dependencies": {

25 "@deepguide-ai/types": "workspace:*",

26 "jszip": "^3.10.1",

27 "open-evidence-signing": "workspace:*"

28 },

29 "devDependencies": {

30 "@screenata/codebase-compliance": "workspace:*",

31 "typescript": "^5.9.0",

32 "vitest": "^3.2.6"

33 }

34}

35

dist/cli.jsView file

138async function performUpgrade(latest) { L139: const { execSync } = await import("child_process"); L140: console.log(`

High

Child Process

Package source references child process execution.

dist/cli.jsView on unpkg · L138

13106eps: "PostScript", L13107: ps1: "PowerShell", L13108: psd1: "PowerShell",

High

Shell

Package source references shell execution.

dist/cli.jsView on unpkg · L13106

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/cli.js: import { existsSync, readFileSync, writeFileSync, mkdirSync } from "fs"; import { createInterface } from "readline"; writeFileSync(CONFIG_FILE, JSON.stringify(config, null, 2), { mode: 384 }); import { readFileSync as readFileSync2, writeFileSync as writeFileSync2, existsSync as existsSync2 } from "fs"; writeFileSync2(CONFIG_PATH, lines.join(` Authorization: `Bearer ${this.config.accessToken}`, Authorization: `Bearer ${this.config.accessToken}`, var fs$writeFile = fs4.writeFile;

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/cli.jsView on unpkg

•Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior. dist/cli.js: import { existsSync, readFileSync, writeFileSync, mkdirSync } from "fs"; writeFileSync(CONFIG_FILE, JSON.stringify(config, null, 2), { mode: 384 }); var CLI_VERSION, NPM_REGISTRY_URL = "https://registry.npmjs.org/@screenata/cli/latest", CONFIG_DIR, CONFIG_FILE, CHECK_TIMEOUT_MS = 2000; import { readFileSync as readFileSync2, writeFileSync as writeFileSync2, existsSync as existsSync2 } from "fs"; writeFileSync2(CONFIG_PATH, lines.join(` var MIME_TYPES, CONFIG_PATH, DEFAULT_API_URL = "https://api.screenata.com"; var OES_CONTEXT = "https://openevidence.org/signing/v1"; if (!opts.allowHttp && !url.startsWith("https://")) {

dist/postinstall.jsView file

Lines 496-536javascript

496// package.json

497var package_default = {

498 name: "@screenata/cli",

499 version: "0.5.0",

500 description: "Screenata CLI — compliance workflows from your terminal",

501 type: "module",

502 license: "MIT"