registry / @ui-bridge/components / 1.1.1

@ui-bridge/components@1.1.1

Lit web components for the UI Bridge browser panel

AI Security Review

scanned 2h ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. Installation automatically mutates an AI-agent skill directory outside the package. The package source does not show exfiltration, remote payload execution, destructive actions, or runtime persistence.

Static reason

One or more suspicious static signals were detected.

Trigger

npm install runs `postinstall`

Impact

May cause an agent environment to discover and load a new skill without an explicit user command.

Mechanism

copies dependency-provided WebAwesome skill files into `../../.agents/skills`

Rationale

The postinstall hook creates a real agent-extension lifecycle risk, but source inspection does not establish a concrete malicious chain. Downgrade to warn rather than block under the install-control-surface policy.

Evidence

package.jsondist/index.jsdist/state/intents.jsdist/comment/uib-comment.jsnode_modules/@awesome.me/webawesome/dist/skills/webawesome../../.agents/skills

Decision evidence

public snapshot

AI called this Suspicious at 86.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

`package.json` defines an automatic `postinstall` that copies a dependency-provided skill into `../../.agents/skills`.

Evidence against

`dist/index.js` only re-exports component, state, and intent modules.
Inspected `dist` modules contain no child-process, filesystem, eval, dynamic loading, credential harvesting, or HTTP request APIs.
`dist/state/intents.js` is a local EventTarget bus; it explicitly has no transport implementation.
`dist/comment/uib-comment.js` only derives a local review URL for a user-triggered clipboard action.

Behavioral surface

Source

ChildProcess

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 16 file(s), 95.0 KB of source, external domains: www.w3.org

Source & flagged code

2 flagged

package.jsonView file

Lines 84-106json

84 "@awesome.me/webawesome": "^3.7.0",

85 "@floating-ui/dom": "^1.7.6",

86 "@lit-labs/signals": "^0.2.0",

87 "autosize": "^6.0.1",

Source & flagged code

2 flagged · loading source

package.jsonView file

•scripts.postinstall = cp -r node_modules/@awesome.[redacted] ../../.agents/skills

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = cp -r node_modules/@awesome.[redacted] ../../.agents/skills

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

Findings

1 High1 Medium3 Low

HighInstall Time Lifecycle Scriptspackage.json

MediumAmbiguous Install Lifecycle Scriptpackage.json

LowScripts Present

LowHigh Entropy Strings

LowUrl Strings

LPM CLI

Source & flagged code

2 flagged

package.jsonView file

Lines 84-106json

84 "@awesome.me/webawesome": "^3.7.0",

85 "@floating-ui/dom": "^1.7.6",

86 "@lit-labs/signals": "^0.2.0",

87 "autosize": "^6.0.1",

88 "lit": "^3.3.0",

89 "signal-polyfill": "^0.2.2",

90 "@ui-bridge/protocol": "1.1.1"

91 },

92 "devDependencies": {

93 "@types/autosize": "^4.0.3",

94 "typescript": "~6.0.2"

95 },

96 "publishConfig": {

97 "access": "public"

98 },

99 "scripts": {

100 "build": "wireit",

101 "dev": "wireit",

102 "typecheck": "tsc --noEmit -p tsconfig.json",

103 "test": "node --loader ./tests/css-loader.mjs --test tests/stores.test.mjs",

104 "postinstall": "cp -r node_modules/@awesome.me/webawesome/dist/skills/webawesome ../../.agents/skills"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L104

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L104

105 }

106}