registry / @speranto/speranto / 0.4.3

@speranto/speranto@0.4.3

A quick and simple machine translation tool for i18n in webapps. Translate JSON, JS/TS, Markdown files and database content using OpenAI, Mistral, or Ollama.

AI Security Review

scanned 11d ago · by lpm-firewall-ai

The postinstall hook performs automatic project-level AI-agent instruction setup, which warrants a warning under the agent integration policy. The inspected behavior is scoped to Speranto documentation and does not establish a concrete malicious attack.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

Installing the package with a package manager that runs postinstall, unless the skip environment variable is set.

Impact

This changes instructions available to project agents without a separate setup command; inspected guide content is limited to Speranto workflows.

Mechanism

The hook resolves the project root and writes a Speranto guide plus a managed instruction block into selected agent instruction files.

AI rationale

Evidence

package.jsonscripts/install-agent-docs.mjsdist/agent-docs-Doje6y4w.mjsdocs/agent-guide.mdAGENTS.mdCLAUDE.md.claude/CLAUDE.md.agents/speranto/guide.md.agents/speranto/manifest.json

Decision evidence

public snapshot

AI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

The package runs an agent-documentation installer from its postinstall hook.
The hook invokes setup for the project when the package is a direct dependency; an environment variable can skip it.
The setup selects project-level AGENTS.md and Claude instruction files and writes managed documentation into those files.
The installed guide concerns Speranto configuration and translation workflows.

Evidence against

The installer skips when the package is not a direct dependency or when the skip variable is set.
The guide tells agents to preserve project-specific instructions and not to add API keys or database connection strings to committed configuration.
The inspected agent-documentation code shows no network transfer.

Behavioral surface

Source

CryptoDynamicRequireEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

Source & flagged code

5 flagged

package.jsonView file

Lines 18-61json

18 "node": ">=22.13"

19 },

20 "bin": {

21 "speranto": "dist/index.mjs"

22 },

23 "publishConfig": {

24 "access": "public"

25 },

26 "files": [

27 "dist",

28 "docs/agent-guide.md",

29 "scripts/agent-docs-root.mjs",

30 "scripts/install-agent-docs.mjs"

31 ],

32 "exports": {

33 ".": {

34 "import": "./dist/index.mjs",

35 "types": "./dist/index.d.mts"

36 }

37 },

38 "scripts": {

39 "types": "tsc src/types.ts --declaration --emitDeclarationOnly --outDir dist",

40 "build": "tsdown",

41 "postinstall": "node ./scripts/install-agent-docs.mjs",

Medium

Suspicious Lifecycle Evidence

The package runs an agent-documentation installer from its postinstall hook.

package.jsonView on unpkg · L38

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L41

42 "link": "pnpm build && pnpm link --global",

43 "sync:version": "tsx scripts/version.ts sync",

44 "bump:version": "tsx scripts/version.ts",

45 "bump:patch": "tsx scripts/version.ts patch",

46 "bump:minor": "tsx scripts/version.ts minor",

47 "bump:major": "tsx scripts/version.ts major",

48 "example:seed": "tsx scripts/seed-example-db.ts",

49 "example": "pnpm example:seed && cd example_content && tsx ../index.ts",

50 "docker:up": "docker compose -p speranto -f tests/docker-compose.yml up -d --wait",

51 "test": "pnpm docker:up && LLM_API_KEY=test vitest run",

52 "test:unit": "LLM_API_KEY=test vitest run --exclude tests/database/postgres.test.ts"

53 },

54 "devDependencies": {

55 "@types/node": "^22.0.0",

56 "@types/mdast": "^4.0.4",

57 "@types/pg": "^8.23.1",

58 "@types/sql.js": "^1.4.11",

59 "tsdown": "^0.23.0",

60 "tsx": "^4.20.6",

61 "typescript": "^7.0.2",

dist/index.mjsView file

Lines 1-41javascript

1#!/usr/bin/env node

2import { t as manageAgentDocs } from "./agent-docs-Doje6y4w.mjs";

3import { createRequire } from "node:module";

4import { createInterface } from "node:readline/promises";

5import { Command, InvalidArgumentError }

dist/agent-docs-Doje6y4w.mjsView file

Lines 40-80javascript

40function ensureInsideProject(projectRoot, targetPath) {

41 const relativePath = relative(projectRoot, targetPath);

42 if (relativePath === "" ||

scripts/install-agent-docs.mjsView file

Lines 1-32javascript

1#!/usr/bin/env node

2import { dirname, resolve } from 'node:path'

3import { fileURLToPath } from 'node:url'

4import { resolveAgentDocsRoots } from './agent-docs-root.mjs'

6const packageRoot

Source & flagged code

5 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./scripts/install-agent-docs.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

38"scripts": { "types": "tsc src/types.ts --declaration --emitDeclarationOnly --outDir dist", "build": "tsdown", "postinstall": "node ./scripts/install-agent-docs.mjs",

Medium

Suspicious Lifecycle Evidence

The package runs an agent-documentation installer from its postinstall hook.

package.jsonView on unpkg · L38

dist/index.mjsView file

21//#region \0rolldown/runtime.js L22: var __require = /* #__PURE__ */ (() => createRequire(import.meta.url))(); L23: //#endregion

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.mjsView on unpkg · L21

Findings

1 Critical1 High6 Medium4 Low

CriticalAi Agent Control Hijackdist/agent-docs-Doje6y4w.mjs

HighInstall Time Lifecycle Scriptspackage.json

MediumDynamic Requiredist/index.mjs

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

MediumSuspicious Lifecycle Evidencepackage.json

MediumSuspicious Dependency Evidencescripts/install-agent-docs.mjs

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @speranto/speranto@0.4.3.

See all versions of @speranto/speranto for other recorded verdicts.

Review the evidence and your use of @speranto/speranto@0.4.3 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-12 11:13:49.415Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.