Loading npm security reports…

@wowok/skills@1.1.13: Suspicious npm security report (Warn) | LPM Firewall

registry / @wowok/skills / 1.1.13

@wowok/skills@1.1.13

WoWok AI Skills for Claude and other AI assistants - Helping AI use WoWok MCP tools correctly

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.; source fingerprint signature matched known malicious package; routed for review

Trigger

npm `postinstall` (default target: Claude); `WOWOK_SKILLS_TARGETS` enables additional clients.

Impact

Unconsented persistence of package-controlled prompts/skills can alter AI-agent behavior across projects and clients.

Mechanism

Lifecycle-driven AI-agent instruction installation and broad uninstall cleanup.

Rationale

The lifecycle hook establishes persistent agent behavior outside the package/project boundary. No exfiltration or remote payload execution was found, but the install-time AI-agent control-surface mutation meets the blocking policy. Product guard normalized uninstall-only AI-agent control-surface mutation to warn-only suspicious because modern npm does not run uninstall lifecycle scripts and the install path is user-invoked.

Evidence

package.jsonscripts/install.jsdist/cli.jsdist/index.jswowok-tools/SKILL.mdwowok-*/SKILL.md~/.claude/skills/wowok-*/SKILL.md~/.codex/skills/wowok-*/SKILL.md~/.agents/skills/wowok-*/SKILL.md~/.codebuddy/skills/wowok-*/SKILL.md~/.cursor/rules/wowok-*.mdc~/.github/prompts/wowok-*.prompt.md

Source & flagged code

4 flagged

package.jsonView file

Lines 14-54json

14 "wowok-guard/",

15 "wowok-tools/",

16 "wowok-safety/",

17 "wowok-machine/",

18 "wowok-order/",

19 "wowok-messenger/",

20 "wowok-output/",

21 "wowok-onboard/",

22 "wowok-scenario/",

23 "wowok-planner/",

24 "wowok-auditor/",

25 "examples/",

26 "scripts/install.js",

27 "README.md",

28 "LICENSE"

29 ],

30 "scripts": {

31 "build": "tsc",

32 "watch": "tsc --watch",

33 "prepublishOnly": "npm run build",

34 "postinstall": "node scripts/install.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L34

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L34

35 "preuninstall": "node scripts/install.js"

36 },

37 "keywords": [

38 "wowok",

39 "ai",

40 "skills",

41 "claude",

42 "mcp",

43 "blockchain",

44 "web3",

45 "ai-agent"

46 ],

47 "author": "wowok <build@wowok.net>",

48 "license": "MIT",

49 "repository": {

50 "type": "git",

51 "url": "https://github.com/wowok-ai/skills.git"

52 },

53 "homepage": "https://wowok.net",

54 "devDependencies": {

scripts/install.jsView file

Lines 1-24javascript

1/**

2 * WoWok Skills installer

3 *

4 * npm lifecycle integration:

5 * postinstall → copy SKILL.md folders to ~/.claude/skills/ (and more via env)

6 * preuninstall → remove SKILL.md folders from all installed client dirs

Critical

Ai Agent Control Hijack

Install-time source drops package-supplied AI-agent/MCP control files or instructions.

scripts/install.jsView on unpkg · L4

7 *

8 * Environment variables:

9 * WOWOK_SKILLS_TARGETS Comma-separated client targets (claude,agents,codebuddy)

dist/cli.jsView file

•matchType = malicious_source_fingerprint_signature signature = d00960488a8b81e1 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @wowok/skills@1.1.12 matchedPath = dist/cli.js matchedIdentity = npm:QHdvd29rL3NraWxscw:1.1.12 similarity = 1.000 shingleOverlap = 3 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

dist/cli.jsView on unpkg