@spzhongwin/skill-logger-plugin: Suspicious npm security report | LPM Firewall

Loading npm security reports…

@spzhongwin/skill-logger-plugin: Suspicious npm security report | LPM Firewall

dist/index.jsView file

264/* ZipEntry error messages*/ L265: NO_DATA: "Nothing to decompress", L266: BAD_CRC: "CRC32 checksum failed {0}", ... L268: UNKNOWN_METHOD: "Invalid/unsupported compression method", L269: /* Inflater error messages */ L270: AVAIL_DATA: "inflate::Available inflate data did not terminate", ... L318: var Errors = require_errors(); L319: var isWin = typeof process === "object" && "win32" === process.platform; L320: var is_Obj = (obj) => typeof obj === "object" && obj !== null; ... L2762: function openclawHome() { L2763: return path.join(os.homedir(), ".openclaw"); L2764: }

Critical

Remote Asset Decode Execute

Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.

dist/index.jsView on unpkg · L264

•Default remote agent channel in dist/index.js: if (cfg.authToken) headers.Authorization = cfg.authToken; if (config.authToken) headers.Authorization = config.authToken; if (config.authToken) headers.Authorization = config.authToken; if (config.authToken) headers.Authorization = config.authToken; var GatewayWsClient = class { if (this.options.authToken) { headers["Authorization"] = this.options.authToken; api.on("gateway_start", (event, ctx) => { Remote skill command dispatch in dist/index.js: async manualInstall(options) { var ASSISTANT_WORKSPACE_RE = /^workspace-assistant-\d{5,}$/; return action === "UPDATE_SKILL" && isBuiltIn === true; return installScope === "gateway" && ["INSTALL_SKILL", "UPDATE_SKILL", "UNINSTALL_SKILL"].includes(String(action || "")); const skillsRoot = path10.join(r

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

dist/index.jsView on unpkg

•Trigger-reachable chain: manifest.exports -> dist/index.js Reachable file contains a blocking source-risk pattern.

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/index.jsView on unpkg

dist/index.jsView file

Lines 244-284javascript

244 EF_ZIP64_SUNCOMP: 0,

245 EF_ZIP64_SCOMP: 8,

246 EF_ZIP64_RHO: 16,

247 EF_ZIP64_DSN: 24

248 };

249 }

250});

251

252// node_modules/adm-zip/util/errors.js

253var require_errors = __commonJS({

254 "node_modules/adm-zip/util/errors.js"(exports) {

255 var errors = {

256 /* Header error messages */

257 INVALID_LOC: "Invalid LOC header (bad signature)",

258 INVALID_CEN: "Invalid CEN header (bad signature)",

259 INVALID_END: "Invalid END header (bad signature)",

260 /* Descriptor */

261 DESCRIPTOR_NOT_EXIST: "No descriptor present",

262 DESCRIPTOR_UNKNOWN: "Unknown descriptor format",

263 DESCRIPTOR_FAULTY: "Descriptor data is malformed",

264 /* ZipEntry error messages*/

265 NO_DATA: "Nothing to decompress",

266 BAD_CRC: "CRC32 checksum failed {0}",

267 FILE_IN_THE_WAY: "There is a file in the way: {0}",

268 UNKNOWN_METHOD: "Invalid/unsupported compression method",

269 /* Inflater error messages */

270 AVAIL_DATA: "inflate::Available inflate data did not terminate",

Critical

Remote Asset Decode Execute

Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.

dist/index.jsView on unpkg · L264

271 INVALID_DISTANCE: "inflate::Invalid literal/length or distance code in fixed or dynamic block",

272 TO_MANY_CODES: "inflate::Dynamic block code description: too many length or distance codes",

273 INVALID_REPEAT_LEN: "inflate::Dynamic block code description: repeat more than specified lengths",

274 INVALID_REPEAT_FIRST: "inflate::Dynamic block code description: repeat lengths with no first length",

275 INCOMPLETE_CODES: "inflate::Dynamic block code description: code lengths codes incomplete",

276 INVALID_DYN_DISTANCE: "inflate::Dynamic block code description: invalid distance code lengths",

277 INVALID_CODES_LEN: "inflate::Dynamic block code description: invalid literal/length code lengths",

278 INVALID_STORE_BLOCK: "inflate::Stored block length did not match one's complement",

279 INVALID_BLOCK_TYPE: "inflate::Invalid block type (type == 3)",

280 /* ADM-ZIP error messages */

281 CANT_EXTRACT_FILE: "Could not extract the file",

282 CANT_OVERRIDE: "Target file already exists",

283 DISK_ENTRY_TOO_LARGE: "Number of disk entries is too large",

284 NO_ZIP: "No zip file was loaded",

•Default remote agent channel in dist/index.js: if (cfg.authToken) headers.Authorization = cfg.authToken; if (config.authToken) headers.Authorization = config.authToken; if (config.authToken) headers.Authorization = config.authToken; if (config.authToken) headers.Authorization = config.authToken; var GatewayWsClient = class { if (this.options.authToken) { headers["Authorization"] = this.options.authToken; api.on("gateway_start", (event, ctx) => { Remote skill command dispatch in dist/index.js: async manualInstall(options) { var ASSISTANT_WORKSPACE_RE = /^workspace-assistant-\d{5,}$/; return action === "UPDATE_SKILL" && isBuiltIn === true; return installScope === "gateway" && ["INSTALL_SKILL", "UPDATE_SKILL", "UNINSTALL_SKILL"].includes(String(action || "")); const skillsRoot = path10.join(r

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

dist/index.jsView on unpkg

•Trigger-reachable chain: manifest.exports -> dist/index.js Reachable file contains a blocking source-risk pattern.

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/index.jsView on unpkg