@series-inc/rundot-game-sdk@5.28.1
RUN.world SDK
AI Security Review
scanned 1mo ago · by lpm-firewall-aiBare npm install only prints a hint. Remaining risk is an explicit, consent-gated setup command that injects a bundled SDK docs index into AGENTS.md, CLAUDE.md, and GEMINI.md, which is first-party dual-use rather than a hidden install attack.
Static reason
One or more suspicious static signals were detected.
Trigger
User runs npx rundot-sdk-setup (optionally with -y).
Impact
Agent tools in the consumer repo may be steered to bundled RUN.world SDK docs; no install-time mutation or secret theft is shown.
Mechanism
Consent-gated writes to agent markdown files and first-party rundot metadata
AI rationale
Bare npm install only prints a hint. Remaining risk is an explicit, consent-gated setup command that injects a bundled SDK docs index into AGENTS.md, CLAUDE.md, and GEMINI.md, which is first-party dual-use rather than a hidden install attack.
Evidence
scripts/setup.mjsAGENTS.mdCLAUDE.mdGEMINI.md.gitignorerundot/cli_hooks.jsonrundot/docs
Decision evidence
public snapshotAI called this Suspicious at 84.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- Explicit `rundot-sdk-setup` can create AGENTS.md, CLAUDE.md, and GEMINI.md in the consumer project and inject a bundled docs index after consent.
- Setup recursively walks the project (skipping .git and node_modules) and rewrites every AGENTS.md and CLAUDE.md it finds.
- The same opt-in command can write rundot/cli_hooks.json and add rundot/docs to .gitignore.
Evidence against
- postinstall only prints a TTY hint and performs no network or file writes.
- Setup is not an install hook; without a TTY and without -y it writes nothing, and interactive prompts default to no.
- child_process in copy-docs.mjs is a prepack docs bundler, not consumer install.
- Firebase and RevenueCat values in the Vite plugin are public playground client keys, not harvested secrets.
- Network usage in dist targets vendor Cloud Run, Firebase, and CDN hosts for the documented game playground APIs.
- No runtime self-dependency, eval, or install-time package-manager execution.
Behavioral surface
ChildProcessCryptoDynamicRequire
Source & flagged code
11 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/install-hint.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgdist/vite/index.jsView file
680patternName = google_api_key
severity = high
line = 680
High
680patternName = google_api_key
severity = high
line = 680
High
686
Findings
11 High4 Medium6 Low
HighInstall Time Lifecycle Scriptspackage.json
HighHigh Secretdist/vite/index.js
HighChild Processscripts/copy-docs.mjs
HighShell
HighBrowser Session Account Hijackdist/playground-standalone/standalone.iife.js
HighRuntime Package Installscripts/copy-docs.mjs
HighSemantic Analysis Limitedscripts/setup.mjs#virtual:normalized:round1
HighSecret Patterndist/vite/index.js
HighSecret Patterndist/vite/index.js
HighSecret Patterndist/vite/index.js
HighSecret Patterndist/vite/index.js
MediumDynamic Requiredist/playground-standalone/standalone.iife.js
Affected versions and remediation
This report applies to @series-inc/rundot-game-sdk@5.28.1.
See all versions of @series-inc/rundot-game-sdk for other recorded verdicts.
- Review the evidence and your use of @series-inc/rundot-game-sdk@5.28.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.