@wan-ai/cli@0.0.3: AI-agent control-surface risk | LPM Firewall

Loading npm security reports…

@wan-ai/cli@0.0.3: AI-agent control-surface risk | LPM Firewall

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/index.jsView file

1#!/usr/bin/env node L2: import{randomUUID as ze}from"node:crypto";import{readFile as bs}from"node:fs/promises";import{basename as di,extname as Le}from"node:path";import H from"node:process";import{create... L3: may adjust prices per`,"tongyi-wanx.member-and-credit.header.title":"Member & Credit","tongyi-wanx.price.change.confirm.Current":"Current","tongyi-wanx.price.change.confirm.AfterCh...

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L1

4214L4215: \u4E0D\u8981\u539A\u91CD\u62CD\u7ACB\u5F97\u8FB9\u6846\u3001\u5361\u7247\u4EFB\u610F\u65CB\u8F6C\u3001\u5361\u7247\u4E92\u76F8\u7A7F\u900F\u3001\u7167\u7247\u91CD\u590D\u3001\u56FE... L4216: `),a}catch(a){throw process.stderr.write(`

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L4214

4214L4215: \u4E0D\u8981\u539A\u91CD\u62CD\u7ACB\u5F97\u8FB9\u6846\u3001\u5361\u7247\u4EFB\u610F\u65CB\u8F6C\u3001\u5361\u7247\u4E92\u76F8\u7A7F\u900F\u3001\u7167\u7247\u91CD\u590D\u3001\u56FE... L4216: `),a}catch(a){throw process.stderr.write(`

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L4214

4214Trigger-reachable command-output exfiltration chain: scripts.start -> dist/index.js L4214: L4215: \u4E0D\u8981\u539A\u91CD\u62CD\u7ACB\u5F97\u8FB9\u6846\u3001\u5361\u7247\u4EFB\u610F\u65CB\u8F6C\u3001\u5361\u7247\u4E92\u76F8\u7A7F\u900F\u3001\u7167\u7247\u91CD\u590D\u3001\u56FE... L4216: `),a}catch(a){throw process.stderr.write(`

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/index.jsView on unpkg · L4214

scripts/install-skills.mjsView file

1Install-time code directly mutates a foreign AI-agent control surface: L5: constants, L6: cpSync, L7: existsSync, L8: lstatSync, L9: mkdirSync, L10: readFileSync, ... L15: statSync, L16: writeFileSync, L17: } from "node:fs"; ... L312: function writeSkillState(statePath, state) { L313: mkdirSync(dirname(statePath), { recursive: true, mode: 0o700 }); L314: const temporaryPath = `${statePath}.${process.pid}.${randomUUID()}.tmp`; Write operation from scripts/postinstall.mjs: L1: #!/usr/bin/env node L2: import { chmodSync, mkdirSync } from "node:fs"; L3: import { homedir } from "node:os"; ... L10: try { L11: mkdirSync(configDir, { recursive: true, mode: 0o700 }); L12: chmodBestEffort(configDir, 0o700); Foreign user/project scope from scripts/postinstall.mjs: L1: #!/usr/bin/env node L2: import {

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/install-skills.mjsView on unpkg · L1

Source & flagged code

7 flagged

package.jsonView file

Lines 15-55json

15 "cn": "https://wanx.biz.aliyun.com",

16 "intl": "https://create.wan.video"

17 }

18 },

19 "files": [

20 "dist/index.js",

21 "README.zh-CN.md",

22 "skills/wan-cli",

23 "scripts/install-skills.mjs",

24 "scripts/postinstall.mjs"

25 ],

26 "scripts": {

27 "generate:build-info": "node scripts/generate-build-info.mjs",

28 "clean": "node scripts/clean.mjs",

29 "prebuild": "pnpm clean && pnpm generate:build-info",

30 "build": "tsc -p tsconfig.json && node scripts/apply-build-flags.mjs && node scripts/bundle-cli.mjs && node scripts/set-executable.mjs",

31 "predev": "pnpm clean && pnpm generate:build-info",

32 "dev": "pnpm build && node dist/index.js",

33 "dev:local": "scripts/dev/use-local.sh",

34 "dev:registry": "scripts/dev/use-registry.sh",

35 "postinstall": "node scripts/postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L35

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L35

36 "skills:install": "node scripts/install-skills.mjs --json",

37 "version:set": "node scripts/set-version.mjs",

38 "precheck": "pnpm generate:build-info",

39 "check": "tsc -p tsconfig.json --noEmit",

40 "start": "node dist/index.js",

41 "test": "pnpm build && node --test",

42 "verify:access-keys": "node scripts/verify-access-key-scan.mjs",

43 "verify:public-package": "node scripts/verify-public-package.mjs",

44 "release:version": "node scripts/prepare-release-version.mjs",

45 "prepublishOnly": "pnpm verify:access-keys && pnpm test && pnpm verify:public-package",

46 "release": "pnpm release:version && npm publish --access public --registry=https://registry.npmjs.org",

47 "release:dry-run": "pnpm release:version && npm publish --dry-run --access public --registry=https://registry.npmjs.org",

48 "test:smoke": "scripts/test-all.sh"

49 },

50 "keywords": [

51 "agent",

52 "ai",

53 "cli",

54 "wan.video",

55 "video-generation"

dist/index.jsView file

1#!/usr/bin/env node L2: import{randomUUID as ze}from"node:crypto";import{readFile as bs}from"node:fs/promises";import{basename as di,extname as Le}from"node:path";import H from"node:process";import{create... L3: may adjust prices per`,"tongyi-wanx.member-and-credit.header.title":"Member & Credit","tongyi-wanx.price.change.confirm.Current":"Current","tongyi-wanx.price.change.confirm.AfterCh...

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L1

4214L4215: \u4E0D\u8981\u539A\u91CD\u62CD\u7ACB\u5F97\u8FB9\u6846\u3001\u5361\u7247\u4EFB\u610F\u65CB\u8F6C\u3001\u5361\u7247\u4E92\u76F8\u7A7F\u900F\u3001\u7167\u7247\u91CD\u590D\u3001\u56FE... L4216: `),a}catch(a){throw process.stderr.write(`

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L4214

4214L4215: \u4E0D\u8981\u539A\u91CD\u62CD\u7ACB\u5F97\u8FB9\u6846\u3001\u5361\u7247\u4EFB\u610F\u65CB\u8F6C\u3001\u5361\u7247\u4E92\u76F8\u7A7F\u900F\u3001\u7167\u7247\u91CD\u590D\u3001\u56FE... L4216: `),a}catch(a){throw process.stderr.write(`

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L4214

scripts/install-skills.mjsView file

Lines 1-21javascript

1#!/usr/bin/env node

2import {

3 accessSync,

4 chmodSync,

5 constants,

6 cpSync,

7 existsSync,

8 lstatSync,

9 mkdirSync,

10 readFileSync,

11 readlinkSync,