registry / AI-agent capability abuse / @series-inc/rundot-game-sdk / 5.29.0

@series-inc/rundot-game-sdk@5.29.0

RUN.world SDK

AI Security Review

scanned 24d ago · by lpm-firewall-ai

The agent configuration capability is concrete but requires an explicit setup invocation and consent. No confirmed malicious lifecycle behavior or exfiltration was found in the inspected source.

Static reason

One or more suspicious static signals were detected.

Trigger

A user runs the setup command and approves agent writes, or passes the affirmative option.

Impact

This can influence participating AI tools through project instruction files; the behavior is user-invoked and consent-gated.

Mechanism

The setup script creates or updates project agent instruction files after its agent-write gate permits it.

AI rationale

The agent configuration capability is concrete but requires an explicit setup invocation and consent. No confirmed malicious lifecycle behavior or exfiltration was found in the inspected source.

Evidence

scripts/setup.mjsAGENTS.mdCLAUDE.mdGEMINI.md

Decision evidence

public snapshot

AI called this Suspicious at 88.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

The package has a postinstall hook, but it only invokes the install-hint script.
The setup command separates agent-file changes into a consent category.
When enabled, setup can create AGENTS.md, CLAUDE.md, and GEMINI.md in the project.
Noninteractive setup without an affirmative flag writes nothing.

Evidence against

No evidence of automatic agent configuration during npm installation.
No concrete credential harvesting, destructive behavior, or unrelated network export was identified in the inspected paths.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkWebSocket

Supply chain

HighEntropyStringsMinifiedTelemetryUrlStrings

Manifest

NoLicense

scanned 34 file(s), 2.94 MB of source, external domains: apis.google.com, discord.gg, docs.rundot-game.com, mock-share-url.com, mp-room-server-playground-623315892370.us-central1.run.app, sdk.invalid, securetoken.google.com, stackoverflow.com, storage.googleapis.com, venus-server-development-575021869122.us-central1.run.app, venus-server-playground-623315892370.us-central1.run.app, venus-server-staging-514242076747.us-central1.run.app, venus-static-01293ak.web.app, www.google.com, www.instagram.com, www.reddit.com, www.tiktok.com, www.w3.org, x.com

Source & flagged code

11 flagged

package.jsonView file

Lines 54-94json

54 },

55 "./mp-client": {

56 "types": "./dist/mp-client/index.d.ts",

57 "import": "./dist/mp-client/index.js",

58 "default": "./dist/mp-client/index.js"

59 },

60 "./host-http": {

61 "types": "./dist/host-http.d.ts",

62 "import": "./dist/host-http.js",

63 "default": "./dist/host-http.js"

64 }

65 },

66 "files": [

67 "dist",

68 "docs",

69 "scripts/install-hint.mjs",

70 "scripts/setup.mjs",

71 "scripts/copy-docs.mjs"

72 ],

73 "scripts": {

74 "postinstall": "node scripts/install-hint.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L74

75 "prepack": "node scripts/copy-docs.mjs",

76 "typecheck": "tsc --noEmit --watch --preserveWatchOutput",

77 "typecheck:ci": "tsc --noEmit",

78 "build": "npm run build:sdk && npm run build:vite && npm run build:mp-server && npm run build:playground-standalone && npm run verify:exports",

79 "build:mp-server": "tsdown --config tsdown.mp-server.config.ts",

80 "build:playground-standalone": "tsdown --config tsdown.playground-standalone.config.ts",

81 "build:sdk": "tsdown --config tsdown.config.ts && npm run verify:production-consumer",

82 "verify:production-consumer": "node scripts/verify-production-consumer.mjs",

83 "verify:exports": "node scripts/verify-exports.mjs",

84 "prove:embedded-externalization": "node scripts/prove-embedded-externalization.mjs",

85 "build:vite": "tsdown --config tsdown.vite.config.ts",

86 "generate:embedded-three-exports": "node scripts/generate-embedded-three-exports.mjs",

87 "pack": "npm pack",

88 "pack:dry-run": "npm pack --dry-run",

89 "test": "jest",

90 "build:test-app": "npm run build --prefix tests/test-app",

91 "verify:syncplay-test-app": "npm run verify:syncplay --prefix tests/test-app --",

92 "dev": "tsdown --watch",

93 "generate:embedded-react-exports": "node scripts/generate-embedded-react-exports.mjs",

94 "generate:embedded-inkjs-exports": "node scripts/generate-embedded-inkjs-exports.mjs",

dist/vite/index.jsView file

Lines 660-706javascript

660}

661/**

662* Suggested display name for an auto-created playground game: the project-root

663* package.json `name`, falling back to the project-root directory basename.

664*/

665function resolveSuggestedGameName(projectRoot) {

666 try {

667 const

scripts/copy-docs.mjsView file

Lines 1-55javascript

1#!/usr/bin/env node

3// Bundle the in-repo SDK docs into packages/sdk/docs/ so the published tarball

4// carries them — replacing the old unpinned remote download in postinstall.

5// Idempotent: removes the target first so prepack + an explicit CI step never

6// leave stale files behind.

8import { execFileSync } from 'child_process';

9import { existsSync, rmSync, cpSync }

dist/playground-standalone/standalone.iife.jsView file

163for (let i = 0; i < s.length; i++) { L164: const code = s.charCodeAt(i); L165: if (code < 128) bytes += 1; ... L568: const region = config.functionsRegion || "us-central1"; L569: if (config.target === "local" && config.functionsEmulatorHost) return `http://${config.functionsEmulatorHost}/${config.firebaseConfig.projectId}/${region}`; L570: return `https://${region}-${config.firebaseConfig.projectId}.cloudfunctions.net`; ... L773: }, L774: body: JSON.stringify(event) L775: }); ... L1460: * @throws exception if current browser/sw context can't run idb.open (ex: Safari iframe, Firefox L1461: * private browsing) L1462: */

High

Browser Session Account Hijack

Browser source reuses an authenticated session to collect identity data and mutate account settings while reporting externally.

dist/playground-standalone/standalone.iife.jsView on unpkg · L163

37291* Dynamic import routed through a function parameter so the module specifier L37292: * isn't visible as a static literal at the `import(...)` call site. Vite's L37293: * `import-analysis` plugin tries to pre-resolve any dynamic import whose

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/playground-standalone/standalone.iife.jsView on unpkg · L37291

scripts/setup.mjs#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

scripts/setup.mjs#virtual:normalized:round1View on unpkg

Source & flagged code

11 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/install-hint.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/vite/index.jsView file

680patternName = google_api_key severity = high line = 680

High

High Secret

Package contains a high-severity secret pattern.

dist/vite/index.jsView on unpkg · L680

680patternName = google_api_key severity = high line = 680

High

Secret Pattern

Google API key in dist/vite/index.js

dist/vite/index.jsView on unpkg · L680

686

Findings

10 High4 Medium6 Low

HighInstall Time Lifecycle Scriptspackage.json

HighHigh Secretdist/vite/index.js

HighChild Processscripts/copy-docs.mjs

HighBrowser Session Account Hijackdist/playground-standalone/standalone.iife.js

HighRuntime Package Installscripts/copy-docs.mjs

HighSemantic Analysis Limitedscripts/setup.mjs#virtual:normalized:round1

HighSecret Patterndist/vite/index.js

MediumDynamic Requiredist/playground-standalone/standalone.iife.js

MediumNetwork

Affected versions and remediation

This report applies to @series-inc/rundot-game-sdk@5.29.0.

See all versions of @series-inc/rundot-game-sdk for other recorded verdicts.

Review the evidence and your use of @series-inc/rundot-game-sdk@5.29.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-29 04:21:08.178Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Related packages

More from @series-inc

Runtime surface

Behavioral surface

Related packages

More from @series-inc

Source & flagged code