@uidxkit/uidx@0.1.4

Project-local, file-first UI design workspace

AI Security Review

scanned 6d ago · by lpm-firewall-ai

The automatic, unprompted install-time setup of a project-local agent integration warrants a warning as a first-party extension lifecycle risk. The inspected behavior does not establish malicious attack behavior.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

An eligible local npm installation runs the package postinstall hook.

Impact

Project agent clients may discover the uidx integration and package-provided skills after installation.

Mechanism

The hook initializes the adjacent project, adds a uidx entry to .mcp.json when one is absent, and copies skills into project agent directories.

AI rationale

Evidence

package.jsonscripts/postinstall.mjsdist/chunk-UAN6K4LE.jsskills/uidx-project/SKILL.md.mcp.json.agents/skills.claude/skills.uidx/.uidx-agent/skills

Decision evidence

public snapshot

AI called this Suspicious at 92.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

The manifest runs a postinstall script.
The hook proceeds for eligible local npm installs and calls project initialization without an affirmative setup prompt.
Initialization writes a uidx MCP server entry into the project .mcp.json file.
Initialization copies package-owned skills into project agent skill directories; the project skill describes coordinating CLI and MCP changes with the local workspace.
The configured MCP bridge and skills are for the project-local uidx workspace.

Evidence against

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 4 file(s), 47.9 KB of source

Source & flagged code

9 flagged

package.jsonView file

Lines 96-134json

96 "typescript": "^5.7.2",

97 "vitest": "^5.0.0"

98 },

99 "description": "Project-local, file-first UI design workspace",

100 "engines": {

101 "node": ">=22.19"

102 },

103 "license": "MIT",

104 "publishConfig": {

105 "access": "public"

106 },

107 "repository": {

108 "type": "git",

109 "url": "git+https://github.com/uidxkit/uidx.git",

110 "directory": "packages/cli"

111 },

112 "homepage": "https://github.com/uidxkit/uidx#readme",

113 "bugs": {

114 "url": "https://github.com/uidxkit/uidx/issues"

115 },

116 "scripts": {

High

Node Builtin Dependency Squat

Package declares a runtime dependency whose name matches a Node built-in module.

package.jsonView on unpkg · L116

117 "postinstall": "node scripts/postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L117

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L117

118 "build": "tsup && tsc -p tsconfig.build.json",

119 "test": "vitest run --maxWorkers=2 --testTimeout=20000",

120 "typecheck": "tsc --noEmit"

121 },

122 "bundledDependencies": [

123 "@uidx/format",

124 "@uidx/schema",

125 "@uidx/server",

126 "@uidx/agent",

127 "@uidx/viewer",

128 "@open-pencil/core",

129 "@open-pencil/scene-graph",

130 "image-size",

131 "pptxgenjs"

132 ]

133}

134

node_modules/@uidx/agent/dist/core/eval.jsView file

Lines 73-97javascript

73 const raw = runInNewContext(`(() => { ${script}\n })()`, sandbox, {

74 timeout: TIMEOUT_MS,

75 // A script is one expression of intent; requiring code generation

76 // (eval/new Function inside the sandbox) has no honest use here.

dist/chunk-UAN6K4LE.jsView file

Lines 405-445javascript

405 return await exists(resolve(content, "uidx.json")) ? content : null;

406}

407async function readPackage(root) {

node_modules/@uidx/viewer/dist/assets/index-DvYWloI6.jsView file

99contains invisible/control Unicode U+FEFF (zero width no-break space) `,this.pos),this.lineEndPos=e),e===-1?this.atEnd?this.buffer.substring(this.pos):null:(this.buffer[e-1]===`\r`&&--e,this.buffer.substring(this.pos,e))}hasChars(e){return this.pos+e<=this.buffer.length}setNext(e){return this.buffer=this.buff

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

node_modules/@uidx/viewer/dist/assets/index-DvYWloI6.jsView on unpkg · L99

node_modules/@uidx/viewer/dist/canvaskit.wasmView file

•path = node_modules/@uidx/viewer/dist/canvaskit.wasm kind = wasm_module sizeBytes = 7094511 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

node_modules/@uidx/viewer/dist/canvaskit.wasmView on unpkg

node_modules/@open-pencil/core/package.jsonView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 7

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

node_modules/@open-pencil/core/package.jsonView on unpkg

Source & flagged code

9 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•Runtime dependency names matching Node built-ins: https

High

Node Builtin Dependency Squat

Package declares a runtime dependency whose name matches a Node built-in module.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

node_modules/@uidx/agent/dist/core/eval.jsView file

Findings

2 Critical4 High5 Medium3 Low

CriticalAi Agent Control Hijackdist/chunk-UAN6K4LE.js

CriticalTrojan Source Unicodenode_modules/@uidx/viewer/dist/assets/index-DvYWloI6.js

HighInstall Time Lifecycle Scriptspackage.json

HighTrigger Reachable External Ai Agent Control Surface Mutationdist/chunk-UAN6K4LE.js

HighNode Builtin Dependency Squatpackage.json

HighSemantic Analysis Limitednode_modules/@open-pencil/core/package.json

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumUnsafe Vm Contextnode_modules/@uidx/agent/dist/core/eval.js

MediumEnvironment Vars

MediumShips Wasm Modulenode_modules/@uidx/viewer/dist/canvaskit.wasm

MediumStructural Risk Force Deep Review

Affected versions and remediation

This report applies to @uidxkit/uidx@0.1.4.

See all versions of @uidxkit/uidx for other recorded verdicts.

Review the evidence and your use of @uidxkit/uidx@0.1.4 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-17 02:49:32.162Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.