registry / @tantuwuyou/frontend-agent-kit / 0.2.5

@tantuwuyou/frontend-agent-kit@0.2.5

Project-local Codex multi-agent workflow for Tantu Wuyou frontend projects.

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

This is a first-party project-local agent extension setup performed at install time, so it warrants a warning under policy. The inspected source does not support a malicious/block verdict.

Static reason

High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source

Trigger

npm postinstall for a non-global install

Impact

Creates project-local AGENTS.md, docs/ai, and .ttwy-agent files; removes only tracked retired .codex agent templates.

Mechanism

copies managed templates and agent state into INIT_CWD

AI rationale

This is a first-party project-local agent extension setup performed at install time, so it warrants a warning under policy. The inspected source does not support a malicious/block verdict.

Evidence

package.jsonscripts/postinstall.cjsscripts/materialize.cjstemplates/AGENTS.mdINIT_CWD/AGENTS.mdINIT_CWD/docs/ai/*INIT_CWD/.ttwy-agent/*INIT_CWD/.codex/agents/prototype-intake.tomlINIT_CWD/.codex/agents/requirement-analyst.tomlINIT_CWD/.codex/agents/qa-verifier.toml

Decision evidence

public snapshot

AI called this Suspicious at 91.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

postinstall initializes files in the installing project via INIT_CWD.
Installer copies agent workflow templates and writes .ttwy-agent state.
It can delete previously managed .codex agent templates.

Evidence against

No network client or endpoint is present in package source.
No credential harvesting, payload download, eval, or import-time shell execution found.
Template updates preserve user-modified files by writing a .ttwy-agent.new conflict file.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystem

Supply chain

HighEntropyStrings

Manifest

NoLicense

scanned 5 file(s), 117 KB of source

Source & flagged code

5 flagged

package.jsonView file

Lines 1-29json

2 "name": "@tantuwuyou/frontend-agent-kit",

3 "version": "0.2.5",

4 "description": "Project-local Codex multi-agent workflow for Tantu Wuyou frontend projects.",

5 "license": "UNLICENSED",

6 "publishConfig": {

7 "registry": "https://registry.npmjs.org/",

8 "access": "public"

9 },

10 "engines": {

11 "node": ">=20"

12 },

13 "scripts": {

14 "postinstall": "node scripts/postinstall.cjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L14

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L14

15 "test": "node --test",

16 "pack:check": "npm pack --dry-run",

17 "prepublishOnly": "npm test && npm run pack:check"

18 },

19 "bin": {

20 "ttwy-frontend-agent": "scripts/cli.cjs"

21 },

22 "files": [

23 "scripts",

24 "templates",

25 "README.md",

26 "PONYTAIL-STANDARD.md"

27 ]

28}

scripts/quality.cjsView file

Lines 1-21javascript

1const { spawnSync } = require('node:child_process');

2const fs = require('node:fs');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

scripts/quality.cjsView on unpkg · L1

scripts/materialize.cjsView file

Lines 1-21javascript

1const crypto = require('node:crypto');

2const fs = require('node:fs');

3const path =

scripts/workflow.cjsView file

•matchType = previous_version_dangerous_delta matchedPackage = @tantuwuyou/frontend-agent-kit@0.2.2 matchedIdentity = npm:[redacted]:0.2.2 similarity = 0.400 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

scripts/workflow.cjsView on unpkg

Source & flagged code

5 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.cjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

scripts/quality.cjsView file

1const { spawnSync } = require('node:child_process'); L2: const fs = require('node:fs');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

scripts/quality.cjsView on unpkg · L1

Findings

1 Critical2 High4 Medium5 Low

CriticalAi Agent Control Hijackscripts/materialize.cjs

HighInstall Time Lifecycle Scriptspackage.json

HighPrevious Version Dangerous Deltascripts/workflow.cjs

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumDynamic Requirescripts/quality.cjs

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowNo License

Affected versions and remediation

This report applies to @tantuwuyou/frontend-agent-kit@0.2.5.

See all versions of @tantuwuyou/frontend-agent-kit for other recorded verdicts.

Review the evidence and your use of @tantuwuyou/frontend-agent-kit@0.2.5 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-08-17 08:09:01.504Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.