registry / AI-agent control-surface risk / @supernal/interface

@supernal/interface

Universal AI Interface - Make any application AI-controllable with decorators (Open Source Edition)

This report shows the evidence for @supernal/interface@1.1.2, the only known version.

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

The automatic postinstall mutation of a foreign, user-wide AI-agent skills directory meets the install-control-surface block policy. No exfiltration was found, but it is not required for this concrete unconsented control-surface write.

Static reason

One or more suspicious static signals were detected.

Trigger

npm installation runs the postinstall lifecycle hook.

Impact

A package installation mutates a broad AI-agent configuration surface and installs agent instructions without consent.

Mechanism

Recursive copy into ~/.openclaw/skills/si

Policy narrative

Installing the package invokes its postinstall hook. Outside CI, that hook creates ~/.openclaw/skills/si and copies every bundled skill file there. The destination is a user-wide OpenClaw skills directory, so the package changes an AI-agent discovery and control surface without requiring the user to run an explicit setup command.

AI rationale

Evidence

package.jsonscripts/postinstall.jsskill/SKILL.md~/.openclaw/skills/si

Decision evidence

public snapshot

AI identified this as a dangerous AI-agent capability at 98.0% confidence with low false-positive risk.

Evidence for policy risk

The package runs scripts/postinstall.js automatically after installation.
The postinstall script targets the user's global OpenClaw skills directory.
It recursively copies the bundled si agent skill without user confirmation.
The copied skill advertises MCP and Claude-related setup commands.

Evidence against

The lifecycle script makes no network request or credential collection.
The separate upgrade CLI requires an explicit confirmation before its registry and agent setup actions.

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 291 file(s), 1.35 MB of source, external domains: cdnjs.cloudflare.com, cli.github.com, npm.pkg.github.com, supernal.ai

Source & flagged code

7 flagged

package.jsonView file

Lines 72-112json

72 "import": "./dist/esm/src/tracking/index.js",

73 "require": "./dist/cjs/src/tracking/index.js"

74 },

75 "./formatters": {

76 "types": "./dist/esm/src/formatters/index.d.ts",

77 "import": "./dist/esm/src/formatters/index.js",

78 "require": "./dist/cjs/src/formatters/index.js"

79 },

80 "./formatters/react": {

81 "types": "./dist/esm/src/formatters/react/index.d.ts",

82 "import": "./dist/esm/src/formatters/react/index.js",

83 "require": "./dist/cjs/src/formatters/react/index.js"

84 },

85 "./src/components/ComponentScanner": {

86 "types": "./dist/esm/src/components/ComponentScanner.d.ts",

87 "import": "./dist/esm/src/components/ComponentScanner.js",

88 "require": "./dist/cjs/src/components/ComponentScanner.js"

89 }

90 },

91 "scripts": {

92 "postinstall": "node scripts/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L92

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L92

93 "clean": "rm -rf dist node_modules/.cache",

94 "build": "npm run clean && npm run build:esm && npm run fix-esm && npm run build:cjs",

95 "build:esm": "tsc -p tsconfig.json",

96 "fix-esm": "node scripts/fix-esm-imports.js",

97 "build:cjs": "tsc -p tsconfig.cjs.json",

98 "build:watch": "tsc -p tsconfig.json --watch",

99 "dev": "tsc -p tsconfig.json --watch",

100 "test": "NODE_ENV=test npx jest",

101 "test:watch": "NODE_ENV=test npx jest --watch",

102 "test:coverage": "NODE_ENV=test npx jest --coverage",

103 "lint": "eslint src --ext .ts,.tsx",

104 "lint:fix": "eslint src --ext .ts,.tsx --fix",

105 "prepack": "npm run build"

106 },

107 "keywords": [

108 "ai",

109 "interface",

110 "decorators",

111 "tools",

112 "testing",

dist/esm/src/data/TestDataManager.jsView file

Lines 137-177javascript

137}

138/**

139 * Default fixtures for common test scenarios

140 */

141export const defaultFixtures = {

142 users: {

143 admin: {

144 username: 'admin@test.com'

dist/esm/src/cli/upgrade.jsView file

Lines 1-35javascript

1#!/usr/bin/env node

2/**

3 * si-upgrade - Upgrade from open-source to enterprise

4 *

5 * Handles:

6 * 1. GitHub authentication check

7 * 2. npm registry configuration for @supernalintelligence scope

8 * 3. Enterprise package installation

9 * 4. Claude Code setup

10 *

dist/esm/src/background/navigation/NavigationGraph.jsView file

Lines 1-33javascript

1/**

2 * NavigationGraph - Enterprise Feature Stub

3 *

4 * This is a stub implementation for the open source edition.

5 * Full runtime navigation tracking available in @supernal/interface-enterprise.

6 *

7 * Context tracking is unified with LocationContext - NavigationGraph delegates

8 * to LocationContext for the single source of truth about current location.

9 *

10 * Visit https://supernal.ai/enterprise for more information.

dist/cjs/src/data/TestDataManager.jsView file

Lines 141-181javascript

141exports.TestDataManager = TestDataManager;

142/**

143 * Default fixtures for common test scenarios

144 */

145exports.defaultFixtures = {

146 users: {

147 admin: {

148 username: 'admin@test.com',

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/esm/src/data/TestDataManager.jsView file

157patternName = generic_password severity = medium line = 157 matchedText = password...23',

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/esm/src/data/TestDataManager.jsView on unpkg · L157

Findings

4 High7 Medium5 Low

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processdist/esm/src/cli/upgrade.js

HighShell

HighRuntime Package Installdist/esm/src/cli/upgrade.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumSecret Patterndist/esm/src/data/TestDataManager.js

MediumDynamic Requiredist/esm/src/background/navigation/NavigationGraph.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

MediumSecret Patterndist/cjs/src/data/TestDataManager.js

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

Affected versions and remediation

This report applies to @supernal/interface@1.1.2.

The versions list below shows the verdict for each recorded version.

Avoid installing @supernal/interface@1.1.2. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-08-28 08:09:30.536Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

1 known version

1.1.2latestshownMaliciousSoft block: AI-agent control surfaceBlockPublishedAug 28, 2026, 7:20 AM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other AI-agent control-surface risk packages

Runtime surface

Behavioral surface

Related packages

Other AI-agent control-surface risk packages

Source & flagged code