registry / @uidxkit/uidx / 0.1.6
@uidxkit/uidx@0.1.6
Project-local, file-first UI design workspace
AI Security Review
scanned 6d ago · by lpm-firewall-aiSource confirms an automatic postinstall path that registers project agent configuration and installs package-owned skills without an affirmative setup prompt. The behavior is project-local and package-aligned, so it supports a warning rather than a publish block.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A local, non-global npm install in an application project with a package.json, unless setup is skipped by the hook’s conditions.
Impact
Agent clients that use the project configuration may gain access to the package’s project tools and instructions without a separate setup prompt.
Mechanism
The postinstall hook initializes the project, registers an MCP command in .mcp.json, adds npm scripts, and copies package skills into project agent directories.
AI rationale
Source confirms an automatic postinstall path that registers project agent configuration and installs package-owned skills without an affirmative setup prompt. The behavior is project-local and package-aligned, so it supports a warning rather than a publish block.
Evidence
package.jsonscripts/postinstall.mjsdist/chunk-WVITJDZ5.js.mcp.json.agents/skills.claude/skills.uidx/.uidx-agent/skills.uidx
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package manifest runs a postinstall script.
- For an eligible local install, postinstall calls project initialization without an affirmative setup prompt.
- Initialization registers the package’s MCP bridge and copies its shipped skills into project agent directories.
- The MCP registration runs the package’s local command when no existing uidx entry is present.
Evidence against
- The hook skips global installs, npm exec, nested dependency locations, and installs with UIDX_SKIP_INIT=1.
- Setup is project-local, preserves an existing uidx MCP entry, and copies skill files without overwriting existing files.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemShell
HighEntropyStrings
Source & flagged code
9 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/postinstall.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•Runtime dependency names matching Node built-ins: https
High
Node Builtin Dependency Squat
Package declares a runtime dependency whose name matches a Node built-in module.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.mjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgnode_modules/@uidx/agent/dist/core/eval.jsView file
Findings
2 Critical4 High5 Medium3 Low
CriticalAi Agent Control Hijackdist/chunk-WVITJDZ5.js
CriticalTrojan Source Unicodenode_modules/@uidx/viewer/dist/assets/index-B3DawXGA.js
HighInstall Time Lifecycle Scriptspackage.json
HighTrigger Reachable External Ai Agent Control Surface Mutationdist/chunk-WVITJDZ5.js
HighNode Builtin Dependency Squatpackage.json
HighSemantic Analysis Limitednode_modules/@uidx/agent/dist/edit/missing-glyphs.js#virtual:normalized:round1
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumUnsafe Vm Contextnode_modules/@uidx/agent/dist/core/eval.js
MediumEnvironment Vars
MediumShips Wasm Modulenode_modules/@uidx/viewer/dist/canvaskit.wasm
Affected versions and remediation
This report applies to @uidxkit/uidx@0.1.6.
See all versions of @uidxkit/uidx for other recorded verdicts.
- Review the evidence and your use of @uidxkit/uidx@0.1.6 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.