registry / @vue-skuilder/cli / 0.2.16

@vue-skuilder/cli@0.2.16

CLI scaffolding tool for vue-skuilder projects

AI Security Review

scanned 2h ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. No install-time attack behavior was found. The notable risk is explicit skuilder studio writing a Claude Code MCP config for a package-owned local course editing server.

Static reason

One or more suspicious static signals were detected.

Trigger

User runs skuilder studio on a valid course directory or manifest.

Impact

Adds .mcp.json in cwd and can enable local MCP course editing if the user/client consumes it; no evidence of exfiltration or stealth persistence.

Mechanism

explicit user-command MCP config setup and local course/studio services

Rationale

Source inspection shows no lifecycle execution or concrete malicious chain, but the explicit .mcp.json mutation for Claude Code is an agent control-surface setup that warrants warning under policy. The behavior is first-party and package-aligned, so it should not be publish-blocked.

Evidence

package.jsondist/cli.jsdist/commands/studio.jsdist/mcp-server.jsdist/commands/pack.jsdist/commands/unpack.jsdist/utils/template.js.mcp.jsonpublic/static-courses/static-data/chunks/indices/.skuilder/studio-builds/dist-lib/

Network endpoints4

localhost:5984localhost:5985localhost:7174localhost:3000

Decision evidence

public snapshot

AI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

dist/commands/studio.js writes .mcp.json into process.cwd() during explicit skuilder studio.
dist/commands/studio.js generates Claude Code MCP config pointing to bundled dist/mcp-server.js with CouchDB env.
dist/mcp-server.js exposes course editing MCP tools over stdio when launched by an MCP client.

Evidence against

package.json has no preinstall/install/postinstall hooks; bin only points to dist/cli.js.
dist/cli.js only initializes logging, reads package.json version, and registers commander subcommands.
Network use is package-aligned CouchDB/Express/studio localhost or user-provided CouchDB URLs for pack/unpack/import.
child_process use is explicit studio workflow: open browser, npm run build, npm run build:lib in user course/build dirs.
No credential harvesting, external exfiltration endpoint, persistence, destructive install-time behavior, or remote payload loader found.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 50 file(s), 352 KB of source, external domains: github.com, parceljs.org

Source & flagged code

5 flagged

dist/commands/studio.jsView file

Lines 359-429javascript

359 }

360 // Find available port starting from 7174

361 let port = 7174;

362 while (port < 7200) {

363 try {

364 await new Promise((resolve, reject) => {

365 const server = http.createServer((req, res) => {

366 try {

367 console.log(chalk.gray(` [Studio HTTP] ${req.method} ${req.url} from ${req.socket.remoteAddress}`));

368 const url = new URL(req.url || '/', `http://${req.headers.host || 'localhost:7174'}`);

369 // Inject config for index.html

370 if (url.pathname === '/' || url.pathname === '/index.html') {

371 const indexPath = path.join(studioSourcePath, 'index.html');

372 let html = fs.readFileSync(indexPath, 'utf8');

373 const connectionScript = `

374 <script>

375 window.STUDIO_CONFIG = {

376 couchdb: {

377 url: '${connectionDetails.url}',

378 username: '${connectionDetails.username}',

379 password: '${connectionDetails.password}'

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/commands/studio.jsView on unpkg · L379

380 },

381 database: {

382 name: '${unpackResult.databaseName}',

383 courseId: '${unpackResult.courseId}',

384 originalCourseId: '${unpackResult.courseId}'

385 },

386 express: {

387 url: '${expressApiUrl || 'http://localhost:3000'}'

388 }

389 };

390 </script>

391 `;

392 html = html.replace('</head>', connectionScript + '</head>');

393 res.setHeader('Content-Type', 'text/html');

394 res.end(html);

395 return;

396 }

397 // Fallback to serve-static for all other assets

398 serve(req, res, () => {

399 // If serve-static doesn't find the file, it calls next().

400 // We can treat this as a 404, but for SPAs, we should serve index.html.

401 const indexPath = path.join(studioSourcePath, 'index.html');

402 let html = fs.readFileSync(indexPath, 'utf8');

403 const connectionScript = `

404 <script>

405 window.STUDIO_CONFIG = {

406 couchdb: {

407 url: '${connectionDetails.url}',

408 username: '${connectionDetails.username}',

409 password: '${connectionDetails.password}'

Medium

Secret Pattern

Hardcoded password in dist/commands/studio.js

dist/commands/studio.jsView on unpkg · L409

410 },

411 database: {

412 name: '${unpackResult.databaseName}',

413 courseId: '${unpackResult.courseId}',

414 originalCourseId: '${unpackResult.courseId}'

415 },

416 express: {

417 url: '${expressApiUrl || 'http://localhost:3000'}'

418 }

419 };

420 </script>

421 `;

422 html = html.replace('</head>', connectionScript + '</head>');

423 res.setHeader('Content-Type', 'text/html');

424 res.end(html);

425 });

426 }

427 catch (error) {

428 console.error(chalk.red(` [Studio HTTP] Error handling request: ${error}`));

429 res.statusCode = 500;

dist/studio-ui-src/main.tsView file

Lines 83-123typescript

83 const configResponse = await fetch('/custom-questions-config.json');

84 customQuestionsStatus.configFetched = true;

85 customQuestionsStatus.configStatus = configResponse.status;

87 console.log(` 🔍 Config fetch response status: ${configResponse.status}`);

88 console.log(` 🔍 Config fetch response URL: ${configResponse.url}`);

90 if (configResponse.ok) {

91 console.log(' ✅ Custom questions config file found');

92 const customConfig = await configResponse.json();

93 console.log(' 📋 Custom config parsed:', customConfig);

94 customQuestionsStatus.hasCustomQuestions = customConfig.hasCustomQuestions;

95 customQuestionsStatus.importPath = customConfig.importPath;

97 if (customConfig.hasCustomQuestions && customConfig.importPath) {

98 console.log(`🎨 Studio Mode: Loading custom questions from ${customConfig.packageName}`);

99 console.log(` 📦 Import path: ${customConfig.importPath}`);

100

101 try {

102 console.log(' 🔄 Attempting dynamic import...');

103 customQuestionsStatus.importAttempted = true;

104 const customModule = await import(/* @vite-ignore */ customConfig.importPath);

105 customQuestionsStatus.importSucceeded = true;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/studio-ui-src/main.tsView on unpkg · L103

106 customQuestionsStatus.moduleExports = Object.keys(customModule);

107 customQuestionsStatus.allCustomQuestionsType = typeof customModule.allCustomQuestions;

108 console.log(' ✅ Custom module imported successfully');

109 console.log(' 🔍 Module exports:', Object.keys(customModule));

110

111 customQuestions = customModule.allCustomQuestions?.();

112 if (customQuestions) {

113 customQuestionsStatus.coursesCount = customQuestions.courses?.length ?? 0;

114 customQuestionsStatus.questionClassesCount = customQuestions.questionClasses?.length ?? 0;

115 console.log(

116 ` ✅ Loaded custom questions: ${customQuestions.questionClasses?.length || 0} types`

117 );

118 console.log(' 📊 Custom questions object:', customQuestions);

119 } else {

120 customQuestionsStatus.error = 'allCustomQuestions() returned null/undefined';

121 console.error(' ❌ FATAL: Custom module did not return questions data!');

122 console.error(' 🔍 allCustomQuestions result:', customQuestions);

123 console.error(' 🔍 allCustomQuestions function:', customModule.allCustomQuestions);

src/commands/studio.tsView file

Lines 478-549typescript

478 await new Promise<void>((resolve, reject) => {

479 const server = http.createServer((req, res) => {

480 try {

481 console.log(

482 chalk.gray(

483 ` [Studio HTTP] ${req.method} ${req.url} from ${req.socket.remoteAddress}`

484 )

485 );

486 const url = new URL(req.url || '/', `http://${req.headers.host || 'localhost:7174'}`);

487

488 // Inject config for index.html

489 if (url.pathname === '/' || url.pathname === '/index.html') {

490 const indexPath = path.join(studioSourcePath, 'index.html');

491 let html = fs.readFileSync(indexPath, 'utf8');

492 const connectionScript = `

493 <script>

494 window.STUDIO_CONFIG = {

495 couchdb: {

496 url: '${connectionDetails.url}',

497 username: '${connectionDetails.username}',

498 password: '${connectionDetails.password}'

Medium

Secret Pattern

Hardcoded password in src/commands/studio.ts

src/commands/studio.tsView on unpkg · L498

499 },

500 database: {

501 name: '${unpackResult.databaseName}',

502 courseId: '${unpackResult.courseId}',

503 originalCourseId: '${unpackResult.courseId}'

504 },

505 express: {

506 url: '${expressApiUrl || 'http://localhost:3000'}'

507 }

508 };

509 </script>

510 `;

511 html = html.replace('</head>', connectionScript + '</head>');

512 res.setHeader('Content-Type', 'text/html');

513 res.end(html);

514 return;

515 }

516

517 // Fallback to serve-static for all other assets

518 serve(req, res, () => {

519 // If serve-static doesn't find the file, it calls next().

520 // We can treat this as a 404, but for SPAs, we should serve index.html.

521 const indexPath = path.join(studioSourcePath, 'index.html');

522 let html = fs.readFileSync(indexPath, 'utf8');

523 const connectionScript = `

524 <script>

525 window.STUDIO_CONFIG = {

526 couchdb: {

527 url: '${connectionDetails.url}',

528 username: '${connectionDetails.username}',

529 password: '${connectionDetails.password}'

Medium

Secret Pattern

Hardcoded password in src/commands/studio.ts

src/commands/studio.tsView on unpkg · L529

530 },

531 database: {

532 name: '${unpackResult.databaseName}',

533 courseId: '${unpackResult.courseId}',

534 originalCourseId: '${unpackResult.courseId}'

535 },

536 express: {

537 url: '${expressApiUrl || 'http://localhost:3000'}'

538 }

539 };

540 </script>

541 `;

542 html = html.replace('</head>', connectionScript + '</head>');

543 res.setHeader('Content-Type', 'text/html');

544 res.end(html);

545 });

546 } catch (error) {

547 console.error(chalk.red(` [Studio HTTP] Error handling request: ${error}`));

548 res.statusCode = 500;

549 res.end('Internal Server Error');

Source & flagged code

5 flagged · loading source

dist/commands/studio.jsView file

379patternName = generic_password severity = medium line = 379 matchedText = password...rd}'

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/commands/studio.jsView on unpkg · L379

409patternName = generic_password severity = medium line = 409 matchedText = password...rd}'

Medium

Secret Pattern

Hardcoded password in dist/commands/studio.js

dist/commands/studio.jsView on unpkg · L409

dist/studio-ui-src/main.tsView file

103customQuestionsStatus.importAttempted = true; L104: const customModule = await import(/* @vite-ignore */ customConfig.importPath); L105: customQuestionsStatus.importSucceeded = true;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/studio-ui-src/main.tsView on unpkg · L103

src/commands/studio.tsView file

498patternName = generic_password severity = medium line = 498 matchedText = password...rd}'

Medium

Secret Pattern

Hardcoded password in src/commands/studio.ts

src/commands/studio.tsView on unpkg · L498

529patternName = generic_password severity = medium line = 529 matchedText = password...rd}'

Medium

Secret Pattern

Hardcoded password in src/commands/studio.ts

src/commands/studio.tsView on unpkg · L529

Findings

7 Medium5 Low

MediumSecret Patterndist/commands/studio.js

MediumDynamic Requiredist/studio-ui-src/main.ts

MediumNetwork

MediumEnvironment Vars

MediumSecret Patterndist/commands/studio.js

MediumSecret Patternsrc/commands/studio.ts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Source & flagged code

5 flagged

dist/commands/studio.jsView file

Lines 359-429javascript

359 }

360 // Find available port starting from 7174

361 let port = 7174;

362 while (port < 7200) {

363 try {

364 await new Promise((resolve, reject) => {

365 const server = http.createServer((req, res) => {

366 try {

367 console.log(chalk.gray(` [Studio HTTP] ${req.method} ${req.url} from ${req.socket.remoteAddress}`));

368 const url = new URL(req.url || '/', `http://${req.headers.host || 'localhost:7174'}`);

369 // Inject config for index.html

370 if (url.pathname === '/' || url.pathname === '/index.html') {

371 const indexPath = path.join(studioSourcePath, 'index.html');

372 let html = fs.readFileSync(indexPath, 'utf8');

373 const connectionScript = `

374 <script>

375 window.STUDIO_CONFIG = {

376 couchdb: {

377 url: '${connectionDetails.url}',

378 username: '${connectionDetails.username}',

379 password: '${connectionDetails.password}'

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/commands/studio.jsView on unpkg · L379

380 },

381 database: {

382 name: '${unpackResult.databaseName}',

383 courseId: '${unpackResult.courseId}',

384 originalCourseId: '${unpackResult.courseId}'

385 },

386 express: {

387 url: '${expressApiUrl || 'http://localhost:3000'}'

388 }

389 };

390 </script>

391 `;

392 html = html.replace('</head>', connectionScript + '</head>');

393 res.setHeader('Content-Type', 'text/html');

394 res.end(html);

395 return;

396 }

397 // Fallback to serve-static for all other assets

398 serve(req, res, () => {

399 // If serve-static doesn't find the file, it calls next().

400 // We can treat this as a 404, but for SPAs, we should serve index.html.

401 const indexPath = path.join(studioSourcePath, 'index.html');

402 let html = fs.readFileSync(indexPath, 'utf8');

403 const connectionScript = `

404 <script>

405 window.STUDIO_CONFIG = {

406 couchdb: {

407 url: '${connectionDetails.url}',

408 username: '${connectionDetails.username}',

409 password: '${connectionDetails.password}'

Medium

Secret Pattern

Hardcoded password in dist/commands/studio.js

dist/commands/studio.jsView on unpkg · L409

410 },

411 database: {

412 name: '${unpackResult.databaseName}',

413 courseId: '${unpackResult.courseId}',

414 originalCourseId: '${unpackResult.courseId}'

415 },

416 express: {

417 url: '${expressApiUrl || 'http://localhost:3000'}'

418 }

419 };

420 </script>

421 `;

422 html = html.replace('</head>', connectionScript + '</head>');

423 res.setHeader('Content-Type', 'text/html');

424 res.end(html);

425 });

426 }

427 catch (error) {

428 console.error(chalk.red(` [Studio HTTP] Error handling request: ${error}`));

429 res.statusCode = 500;

dist/studio-ui-src/main.tsView file

Lines 83-123typescript

83 const configResponse = await fetch('/custom-questions-config.json');

84 customQuestionsStatus.configFetched = true;

85 customQuestionsStatus.configStatus = configResponse.status;

87 console.log(` 🔍 Config fetch response status: ${configResponse.status}`);

88 console.log(` 🔍 Config fetch response URL: ${configResponse.url}`);

90 if (configResponse.ok) {

91 console.log(' ✅ Custom questions config file found');

92 const customConfig = await configResponse.json();

93 console.log(' 📋 Custom config parsed:', customConfig);

94 customQuestionsStatus.hasCustomQuestions = customConfig.hasCustomQuestions;

95 customQuestionsStatus.importPath = customConfig.importPath;

97 if (customConfig.hasCustomQuestions && customConfig.importPath) {

98 console.log(`🎨 Studio Mode: Loading custom questions from ${customConfig.packageName}`);

99 console.log(` 📦 Import path: ${customConfig.importPath}`);

100

101 try {

102 console.log(' 🔄 Attempting dynamic import...');

103 customQuestionsStatus.importAttempted = true;

104 const customModule = await import(/* @vite-ignore */ customConfig.importPath);

105 customQuestionsStatus.importSucceeded = true;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/studio-ui-src/main.tsView on unpkg · L103

106 customQuestionsStatus.moduleExports = Object.keys(customModule);

107 customQuestionsStatus.allCustomQuestionsType = typeof customModule.allCustomQuestions;

108 console.log(' ✅ Custom module imported successfully');

109 console.log(' 🔍 Module exports:', Object.keys(customModule));

110

111 customQuestions = customModule.allCustomQuestions?.();

112 if (customQuestions) {

113 customQuestionsStatus.coursesCount = customQuestions.courses?.length ?? 0;

114 customQuestionsStatus.questionClassesCount = customQuestions.questionClasses?.length ?? 0;

115 console.log(

116 ` ✅ Loaded custom questions: ${customQuestions.questionClasses?.length || 0} types`

117 );

118 console.log(' 📊 Custom questions object:', customQuestions);

119 } else {

120 customQuestionsStatus.error = 'allCustomQuestions() returned null/undefined';

121 console.error(' ❌ FATAL: Custom module did not return questions data!');

122 console.error(' 🔍 allCustomQuestions result:', customQuestions);

123 console.error(' 🔍 allCustomQuestions function:', customModule.allCustomQuestions);

src/commands/studio.tsView file

Lines 478-549typescript

478 await new Promise<void>((resolve, reject) => {

479 const server = http.createServer((req, res) => {

480 try {

481 console.log(

482 chalk.gray(

483 ` [Studio HTTP] ${req.method} ${req.url} from ${req.socket.remoteAddress}`

484 )

485 );

486 const url = new URL(req.url || '/', `http://${req.headers.host || 'localhost:7174'}`);

487

488 // Inject config for index.html

489 if (url.pathname === '/' || url.pathname === '/index.html') {

490 const indexPath = path.join(studioSourcePath, 'index.html');

491 let html = fs.readFileSync(indexPath, 'utf8');

492 const connectionScript = `

493 <script>

494 window.STUDIO_CONFIG = {

495 couchdb: {

496 url: '${connectionDetails.url}',

497 username: '${connectionDetails.username}',

498 password: '${connectionDetails.password}'

Medium

Secret Pattern

Hardcoded password in src/commands/studio.ts

src/commands/studio.tsView on unpkg · L498

499 },

500 database: {

501 name: '${unpackResult.databaseName}',

502 courseId: '${unpackResult.courseId}',

503 originalCourseId: '${unpackResult.courseId}'

504 },

505 express: {

506 url: '${expressApiUrl || 'http://localhost:3000'}'

507 }

508 };

509 </script>

510 `;

511 html = html.replace('</head>', connectionScript + '</head>');

512 res.setHeader('Content-Type', 'text/html');

513 res.end(html);

514 return;

515 }

516

517 // Fallback to serve-static for all other assets

518 serve(req, res, () => {

519 // If serve-static doesn't find the file, it calls next().

520 // We can treat this as a 404, but for SPAs, we should serve index.html.

521 const indexPath = path.join(studioSourcePath, 'index.html');

522 let html = fs.readFileSync(indexPath, 'utf8');

523 const connectionScript = `

524 <script>

525 window.STUDIO_CONFIG = {

526 couchdb: {

527 url: '${connectionDetails.url}',

528 username: '${connectionDetails.username}',

529 password: '${connectionDetails.password}'

Medium

Secret Pattern

Hardcoded password in src/commands/studio.ts

src/commands/studio.tsView on unpkg · L529

530 },

531 database: {

532 name: '${unpackResult.databaseName}',

533 courseId: '${unpackResult.courseId}',

534 originalCourseId: '${unpackResult.courseId}'

535 },

536 express: {

537 url: '${expressApiUrl || 'http://localhost:3000'}'

538 }

539 };

540 </script>

541 `;

542 html = html.replace('</head>', connectionScript + '</head>');

543 res.setHeader('Content-Type', 'text/html');

544 res.end(html);

545 });

546 } catch (error) {

547 console.error(chalk.red(` [Studio HTTP] Error handling request: ${error}`));

548 res.statusCode = 500;

549 res.end('Internal Server Error');