registry / @social-data/social-neuron-opinion-query / 1.0.1

@social-data/social-neuron-opinion-query@1.0.1

Social Neuron opinion-query 能力 CLI —— 一能力一命令(social-neuron-opinion-query),薄客户端直达 /opinion-query/{op}。

AI Security Review

scanned 10d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Installation automatically modifies the user's OpenClaw skills directory. This is an unconsented install-time write to a broad AI-agent control surface.

Static reason

One or more suspicious static signals were detected.

Trigger

npm postinstall execution.

Impact

The package can add or replace agent skill content without an explicit user command.

Mechanism

The postinstall script selects an OpenClaw skills directory under the user's home directory and recursively copies bundled skill files into it.

Policy narrative

Installing the package invokes its postinstall hook. That hook defaults to the user's OpenClaw skills directory and copies bundled skill files there, creating directories as needed. This automatically alters an AI-agent control surface outside the package and consumer project.

AI rationale

The automatic lifecycle hook performs broad OpenClaw skill installation without user invocation. This meets the install-time AI-agent control-surface mutation block policy.

Evidence

package.jsonbin/install-skills.js

Decision evidence

public snapshot

AI identified this as a dangerous AI-agent capability at 98.0% confidence with low false-positive risk.

Evidence for policy risk

package metadata runs an installer automatically during postinstall.

@social-data/social-neuron-opinion-query@1.0.1

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code