Loading npm security reports…

@techierathore/techieflow@1.0.2: AI-agent control-surface risk | LPM Firewall

registry / @techierathore/techieflow / 1.0.2

@techierathore/techieflow@1.0.2

TechieFlow: a spec-driven development framework for AI coding agents, for Claude Code and OpenCode. One command installs it into any project.

AI Security Review

scanned 2h ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Installing this dependency triggers a project-wide AI-agent framework deployment without an explicit installer command. It installs executable hooks and agent configuration, then removes npm evidence of the dependency.

Static reason

One or more suspicious static signals were detected.

Trigger

npm install or npm ci that installs the package as a dependency.

Impact

Consumer projects receive Claude, OpenCode, and Codex hooks and configuration that can affect future agent actions and execution permissions.

Mechanism

Postinstall scaffolds AI-agent control files and launches detached dependency cleanup.

Policy narrative

A normal dependency installation runs the postinstall hook, which invokes the framework installer against the consumer project. That installer deploys Claude, OpenCode, and Codex configuration, including command hooks that execute package-controlled code during later agent events. The postinstall process then detaches cleanup code that removes the package entry, lockfile entry, and possibly npm files. The installed goal runner can enable YOLO mode and repeatedly launch an agent. This is unconsented install-time mutation of broad AI-agent control surfaces.

Rationale

The package performs automatic postinstall deployment of executable AI-agent hooks and configuration into a consuming project, then hides its installation footprint. This meets the install-control-surface block condition even without confirmed network exfiltration.

Evidence

package.jsonscripts/npm-postinstall.mjsscripts/install.mjsscripts/npm-cleanup.mjs.codex/hooks.json.tfcore/utils/tf-goal.sh

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/npm[redacted]

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

scripts/install.mjsView file

•path = scripts/install.mjs kind = trigger_reachable_excluded_payload sizeBytes = 54267 triggerReachableSource = scripts/install.mjs excludedPayload = .tfcore/utils/tf-gitignore-audit.sh

Critical

Trigger Reachable Excluded Directory Payload

A package entrypoint or install-reachable source explicitly loads and activates an executable-looking payload from a test, fixture, or hidden path.

scripts/install.mjsView on unpkg

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. templates) .claude/commands/ ← claude code slash commands (techieflow agents) .claude/settings.json ← yolo-except-git-writes permissions workflow.html ← the human workflow guide (open in a browser; §17 = macos / windows / linux) opencode.jsonc ← opencode config (loads agents/tasks from .tfcore/ via {file:...} refs) .gitignore ← framework entries appended (deployed copies stay uncommitted) tests/playwright/ tests/unit/ src/ all techieflow templates the analyst will need live locally in this project under: .tfcore/templates/v4custom/ so the project is portable — copy this whole tree to another machi

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

scripts/install.mjsView on unpkg

.tfcore/utils/tf-goal.shView file

•path = .tfcore/utils/tf-goal.sh kind = payload_in_excluded_dir sizeBytes = 22101 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.tfcore/utils/tf-goal.shView on unpkg

•path = .tfcore/utils/tf-goal.sh kind = build_helper sizeBytes = 22101 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

.tfcore/utils/tf-goal.shView on unpkg

scripts/install.mjs#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

scripts/install.mjs#virtual:normalized:round1View on unpkg

Source & flagged code

6 flagged

package.jsonView file

Lines 29-62json

29 ".claude/commands",

30 "!.claude/commands/trblazeui.md",

31 "!.claude/commands/techierag.md",

32 ".opencode/plugin",

33 ".opencode/command",

34 "!.opencode/command/trblazeui.md",

35 "!.opencode/command/techierag.md",

36 ".codex/config.toml",

37 ".codex/hooks.json",

38 ".codex/rules",

39 "opencode.jsonc",

40 "WORKFLOW.html",

41 "scripts/install.mjs",

42 "scripts/npm-postinstall.mjs",

43 "scripts/npm-cleanup.mjs",

44 "docs/TechieFlow-Installation.md",

45 "LICENSE",

46 "README.md"

47 ],

48 "scripts": {

49 "postinstall": "node scripts/npm-postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L49

50 "validate": "node scripts/validate.mjs",

51 "test:install": "node scripts/test-install.mjs",

52 "pack:check": "npm pack --dry-run",

53 "prepublishOnly": "npm run validate && npm run test:install"

54 },

55 "engines": {

56 "node": ">=20"

57 },

58 "publishConfig": {

59 "access": "public"

60 }

61}

62

scripts/install.mjsView file

•path = scripts/install.mjs kind = trigger_reachable_excluded_payload sizeBytes = 54267 triggerReachableSource = scripts/install.mjs excludedPayload = .tfcore/utils/tf-gitignore-audit.sh

Critical

Trigger Reachable Excluded Directory Payload

A package entrypoint or install-reachable source explicitly loads and activates an executable-looking payload from a test, fixture, or hidden path.

scripts/install.mjsView on unpkg

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. templates) .claude/commands/ ← claude code slash commands (techieflow agents) .claude/settings.json ← yolo-except-git-writes permissions workflow.html ← the human workflow guide (open in a browser; §17 = macos / windows / linux) opencode.jsonc ← opencode config (loads agents/tasks from .tfcore/ via {file:...} refs) .gitignore ← framework entries appended (deployed copies stay uncommitted) tests/playwright/ tests/unit/ src/ all techieflow templates the analyst will need live locally in this project under: .tfcore/templates/v4custom/ so the project is portable — copy this whole tree to another machi

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

scripts/install.mjsView on unpkg

.tfcore/utils/tf-goal.shView file

•path = .tfcore/utils/tf-goal.sh kind = payload_in_excluded_dir sizeBytes = 22101 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.tfcore/utils/tf-goal.shView on unpkg

•path = .tfcore/utils/tf-goal.sh kind = build_helper sizeBytes = 22101 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

.tfcore/utils/tf-goal.shView on unpkg

scripts/install.mjs#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

scripts/install.mjs#virtual:normalized:round1View on unpkg