Loading npm security reports…

@xbg.solutions/bpsk-core@2.1.0: AI-agent control-surface risk | LPM Firewall

registry / @xbg.solutions/bpsk-core / 2.1.0

@xbg.solutions/bpsk-core@2.1.0

XBG Frontend Core - Base framework, types, stores, error handling, logging

AI Security Review

scanned 2h ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Installing the package automatically mutates the consuming project's Claude Code skill directory. It recursively copies package-provided instructions and overwrites existing files.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm installation runs the postinstall lifecycle hook.

Impact

A dependency can replace or add behavior-bearing Claude Code skills in an unrelated consumer project without an explicit setup command.

Mechanism

Automatic recursive overwrite of a consumer AI-agent control directory.

Policy narrative

During installation, npm launches copy-skills.cjs. The script obtains the consumer project path from INIT_CWD and recursively copies the package's bundled .claude/skills tree into that project's .claude/skills directory. Existing files are overwritten, causing an unconsented dependency-controlled change to the consumer's AI-agent instruction surface.

Rationale

This is an automatic postinstall write to a foreign, behavior-bearing AI-agent control surface, with recursive overwrite semantics. That concrete install-time mutation meets the blocking policy even though no secret theft or network exfiltration was found.

Evidence

package.jsonscripts/copy-skills.cjs.claude/skills$INIT_CWD/.claude/skills

Decision evidence

public snapshot

with false-positive risk.

Source & flagged code

5 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/copy-skills.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

scripts/copy-skills.cjsView file

2/** L3: * postinstall script — copies .claude/skills/ from this package L4: * into the consuming project's .claude/skills/ directory. L5: * ... L29: L30: const sourceSkills = path.join(__dirname, '..', '.claude', 'skills'); L31: const targetSkills = path.join(projectRoot, '.claude', 'skills'); L32: ... L42: function copyDirSync(src, dest) { L43: fs.mkdirSync(dest, { recursive: true }); L44: ... L51: } else {

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/copy-skills.cjsView on unpkg · L2

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. #!/usr/bin/env node const fs = require('fs'); const path = require('path'); const projectroot = process.env.init_cwd; if (!projectroot) { process.exit(0); } const packagejson = path.join(projectroot, 'package.json'); try { const pkg = json.parse(fs.readfilesync(packagejs

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

scripts/copy-skills.cjsView on unpkg

.claude/skills/firebase/cloud-functions/scripts/export_firestore.shView file

•path = .claude/skills/firebase/cloud-functions/scripts/export_firestore.sh kind = payload_in_excluded_dir sizeBytes = 3107 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.claude/skills/firebase/cloud-functions/scripts/export_firestore.shView on unpkg

•path = .claude/skills/firebase/cloud-functions/scripts/export_firestore.sh kind = build_helper sizeBytes = 3107 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

.claude/skills/firebase/cloud-functions/scripts/export_firestore.shView on unpkg

Source & flagged code

5 flagged

package.jsonView file

Lines 1-28json

1{

2 "name": "@xbg.solutions/bpsk-core",

3 "version": "2.1.0",

4 "description": "XBG Frontend Core - Base framework, types, stores, error handling, logging",

5 "main": "lib/index.js",

6 "types": "lib/index.d.ts",

7 "type": "module",

8 "files": [

9 "lib",

10 ".claude/skills",

11 "scripts/copy-skills.cjs"

12 ],

13 "scripts": {

14 "build": "tsc",

15 "build:watch": "tsc --watch",

16 "clean": "rm -rf lib .claude",

17 "prepublishOnly": "node scripts/bundle-skills.cjs && npm run build",

18 "postinstall": "node scripts/copy-skills.cjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L18

19 },

20 "publishConfig": {

21 "access": "public"

22 },

23 "peerDependencies": {

24 "svelte": "^5.0.0",

25 "@sveltejs/kit": "^2.0.0"

26 }

27}

28

scripts/copy-skills.cjsView file

Lines 1-22javascript

1#!/usr/bin/env node

2/**

3 * postinstall script — copies .claude/skills/ from this package

4 * into the consuming project's .claude/skills/ directory.

5 *

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/copy-skills.cjsView on unpkg · L2

6 * Uses INIT_CWD (set by npm to the directory where `npm install` was run)

7 * to locate the project root reliably, regardless of hoisting.

8 */

.claude/skills/firebase/cloud-functions/scripts/export_firestore.shView file

•path = .claude/skills/firebase/cloud-functions/scripts/export_firestore.sh kind = payload_in_excluded_dir sizeBytes = 3107 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.claude/skills/firebase/cloud-functions/scripts/export_firestore.shView on unpkg

•path = .claude/skills/firebase/cloud-functions/scripts/export_firestore.sh kind = build_helper sizeBytes = 3107 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

.claude/skills/firebase/cloud-functions/scripts/export_firestore.shView on unpkg