registry / @techierathore/techieflow / 1.1.1
@techierathore/techieflow@1.1.1
TechieFlow: a spec-driven development framework for AI coding agents, for Claude Code and OpenCode. One command installs it into any project.
AI Security Review
scanned 7d ago · by lpm-firewall-aiThe source confirms lifecycle-triggered first-party agent setup that creates project-level settings with broad permissions. That warrants a warning for residual agent extension lifecycle risk, but the inspected behavior does not establish a concrete attack supporting a block.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
A qualifying npm install or ci dependency install that runs the package's postinstall hook.
Impact
The consumer's project agent receives broad tool permissions from lifecycle-triggered setup, which may increase the effect of unsafe agent actions.
Mechanism
The hook invokes the installer, which creates project-level Claude settings if absent; those settings enable accept-edits mode and allow Bash, Edit, and Write tools.
AI rationale
The source confirms lifecycle-triggered first-party agent setup that creates project-level settings with broad permissions. That warrants a warning for residual agent extension lifecycle risk, but the inspected behavior does not establish a concrete attack supporting a block.
Evidence
package.jsonscripts/npm-postinstall.mjsscripts/install.mjs.claude/settings.json.tfcore/
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The manifest runs a postinstall hook that starts the package installer for qualifying dependency installs.
- The installer creates project-level Claude settings only when that file is missing.
- Those settings set the agent mode to accept edits and allow tools including Bash, Edit, and Write.
- The installer also adds framework directories to the project ignore list.
- A separate goal runner uses Claude's bypass-permissions mode when explicitly invoked.
Evidence against
- The settings creation preserves an existing settings file; the installer also offers a keep-permissions option for updates.
- The inspected setup is for this package's own project framework and settings; it does not establish credential theft or data transfer.
Behavioral surface
ChildProcessEnvironmentVarsFilesystem
HighEntropyStringsUrlStrings
Source & flagged code
6 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/npm[redacted]
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgscripts/install.mjsView file
•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation.
file of shippedfiles(".opencode/command", ".md")) if (!librarypersonas.has(file)) plan(`.opencode/command/${file}`);
for (const path of [".codex", ".agents/skills"]) if (existssync(join(target, path))) plan(path, "(retired codex adapter)");
for (const lib of [".trblazeui", ".techierag"]) {
if (!existssync(join(target, lib))) continue;
const rest = readdirsync(join(target, lib)).filter((f) => f !== ".codex-agent-package-owned" && f !== ".gitignore");
plan(`${lib}/.codex-agent-package-owned`);
if (rest.length === 0) plan(`${lib}/.gitignore`);
}
if (existssync(join(target,
High
Trigger Reachable External Ai Agent Control Surface Mutation
Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.
scripts/install.mjsView on unpkgFindings
5 High3 Medium5 Low
HighInstall Time Lifecycle Scriptspackage.json
HighTrigger Reachable External Ai Agent Control Surface Mutationscripts/install.mjs
HighPayload In Excluded Dir.tfcore/utils/tf-goal.sh
HighSemantic Analysis Limitedscripts/install.mjs#virtual:normalized:round1
HighKnown Malware Source Similarityscripts/npm-postinstall.mjs
MediumEnvironment Vars
MediumShips Build Helper.tfcore/utils/tf-goal.sh
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @techierathore/techieflow@1.1.1.
See all versions of @techierathore/techieflow for other recorded verdicts.
- Review the evidence and your use of @techierathore/techieflow@1.1.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.