Loading npm security reports…

@xbg.solutions/bpsk-core@2.0.0: AI-agent control-surface risk | LPM Firewall

registry / @xbg.solutions/bpsk-core / 2.0.0

@xbg.solutions/bpsk-core@2.0.0

XBG Frontend Core - Base framework, types, stores, error handling, logging

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. The package mutates a consuming project's Claude Code skills during npm install. This is an unconsented AI-agent control surface write, independent of whether the bundled skill text is otherwise benign.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm install of @xbg.solutions/bpsk-core@2.0.0

Impact

Alters future AI-agent behavior/instructions in the consumer project and overwrites existing skill files.

Mechanism

postinstall recursive copy into .claude/skills

Policy narrative

On npm install, the postinstall hook runs scripts/copy-skills.cjs. That script derives the consumer project root from INIT_CWD, then recursively copies the package's .claude/skills directory into <consumer-project>/.claude/skills, overwriting existing files. The installed content is AI-agent instruction material and helper scripts, so package installation changes the user's agent control surface without an explicit user action beyond dependency installation.

Rationale

Static inspection confirms lifecycle execution that writes package-supplied Claude Code skills into the consuming project. No exfiltration was found, but the unconsented install-time AI-agent control-surface mutation is concrete attack behavior under the review policy. Product guard normalized a non-low false-positive publish_block request to warn-only suspicious.

Evidence

package.jsonscripts/copy-skills.cjs.claude/skills/skill.md.claude/skills/firebase/firebase-local-env-setup/SKILL.md.claude/skills/firebase/cloud-functions/scripts/export_firestore.sh.claude/skills/firebase/cloud-functions/scripts/manage_secrets.sh

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/copy-skills.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

scripts/copy-skills.cjsView file

1Install-time AI-agent control hijack evidence: L2: /** L3: * postinstall script — copies .claude/skills/ from this package L4: * into the consuming project's .claude/skills/ directory. L5: * ... L29: L30: const sourceSkills = path.join(__dirname, '..', '.claude', 'skills'); L31: const targetSkills = path.join(projectRoot, '.claude', 'skills'); L32: ... L42: function copyDirSync(src, dest) { L43: fs.mkdirSync(dest, { recursive: true }); L44: ... L51: } else { Payload evidence from .[redacted].md: L1: --- L2: name: animate

Critical

Ai Agent Control Hijack

Install-time source drops package-supplied AI-agent/MCP control files or instructions.

scripts/copy-skills.cjsView on unpkg · L1

.claude/skills/firebase/cloud-functions/scripts/export_firestore.shView file

•path = .claude/skills/firebase/cloud-functions/scripts/export_firestore.sh kind = payload_in_excluded_dir sizeBytes = 3107 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.claude/skills/firebase/cloud-functions/scripts/export_firestore.shView on unpkg

•path = .claude/skills/firebase/cloud-functions/scripts/export_firestore.sh kind = build_helper sizeBytes = 3107 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

.claude/skills/firebase/cloud-functions/scripts/export_firestore.shView on unpkg

.claude/skills/firebase/cloud-functions/references/auth-integration.mdView file

424patternName = generic_password severity = medium line = 424 matchedText = password...rd",

Medium

Secret Pattern

Hardcoded password in .claude/skills/firebase/cloud-functions/references/auth-integration.md

.claude/skills/firebase/cloud-functions/references/auth-integration.mdView on unpkg · L424

437patternName = generic_password severity = medium line = 437 matchedText = password...rd",

Medium

Secret Pattern

Hardcoded password in .claude/skills/firebase/cloud-functions/references/auth-integration.md

.claude/skills/firebase/cloud-functions/references/auth-integration.mdView on unpkg · L437

488patternName = generic_password severity = medium line = 488 matchedText = password...rd",

Medium

Secret Pattern

Hardcoded password in .claude/skills/firebase/cloud-functions/references/auth-integration.md

.claude/skills/firebase/cloud-functions/references/auth-integration.mdView on unpkg · L488

.claude/skills/svelte5_sveltekit/docs/integration-patterns.mdView file

238patternName = generic_password severity = medium line = 238 matchedText = if (!pas...ed';

Medium

Secret Pattern

Hardcoded password in .claude/skills/svelte5_sveltekit/docs/integration-patterns.md

.claude/skills/svelte5_sveltekit/docs/integration-patterns.mdView on unpkg · L238

Source & flagged code

8 flagged

package.jsonView file

Lines 1-28json

1{

2 "name": "@xbg.solutions/bpsk-core",

3 "version": "2.0.0",

4 "description": "XBG Frontend Core - Base framework, types, stores, error handling, logging",

5 "main": "lib/index.js",

6 "types": "lib/index.d.ts",

7 "type": "module",

8 "files": [

9 "lib",

10 ".claude/skills",

11 "scripts/copy-skills.cjs"

12 ],

13 "scripts": {

14 "build": "tsc",

15 "build:watch": "tsc --watch",

16 "clean": "rm -rf lib .claude",

17 "prepublishOnly": "node scripts/bundle-skills.cjs && npm run build",

18 "postinstall": "node scripts/copy-skills.cjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L18

19 },

20 "publishConfig": {

21 "access": "public"

22 },

23 "peerDependencies": {

24 "svelte": "^5.0.0",

25 "@sveltejs/kit": "^2.0.0"

26 }

27}

28

scripts/copy-skills.cjsView file

Lines 1-21javascript

1#!/usr/bin/env node

2/**

3 * postinstall script — copies .claude/skills/ from this package

4 * into the consuming project's .claude/skills/ directory.

5 *

Critical

Ai Agent Control Hijack

Install-time source drops package-supplied AI-agent/MCP control files or instructions.

scripts/copy-skills.cjsView on unpkg · L1

6 * Uses INIT_CWD (set by npm to the directory where `npm install` was run)

7 * to locate the project root reliably, regardless of hoisting.

8 */

.claude/skills/firebase/cloud-functions/scripts/export_firestore.shView file

•path = .claude/skills/firebase/cloud-functions/scripts/export_firestore.sh kind = payload_in_excluded_dir sizeBytes = 3107 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.claude/skills/firebase/cloud-functions/scripts/export_firestore.shView on unpkg

•path = .claude/skills/firebase/cloud-functions/scripts/export_firestore.sh kind = build_helper sizeBytes = 3107 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

.claude/skills/firebase/cloud-functions/scripts/export_firestore.shView on unpkg

.claude/skills/firebase/cloud-functions/references/auth-integration.mdView file

Lines 404-457markdown

404// By email

405const user = await getAuth().getUserByEmail(email);

406

407// By phone

408const user = await getAuth().getUserByPhoneNumber(phoneNumber);

409

410// Multiple users

411const result = await getAuth().getUsers([

412 { uid: "uid1" },

413 { email: "user@example.com" },

414 { phoneNumber: "+1234567890" }

.claude/skills/svelte5_sveltekit/docs/integration-patterns.mdView file

Lines 218-258markdown

218

219 {#if error}

220 <p class="text-sm text-red-600">{error}</p>

221 {/if}

222</div>

223```

224

225**Usage:**

226```svelte

227<script>

228 import Input from '$lib/components/Input.svelte';