Loading npm security reports…

@xbg.solutions/bpsk-core@2.2.0: AI-agent control-surface risk | LPM Firewall

registry / @xbg.solutions/bpsk-core / 2.2.0

@xbg.solutions/bpsk-core@2.2.0

XBG Frontend Core - Base framework, types, stores, error handling, logging

AI Security Review

scanned 26d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Installing the package automatically writes its bundled Claude skills into the consuming project's AI-agent configuration. Existing skill files may be replaced.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm installation runs postinstall.

Impact

Package-controlled instructions and helper files become available to the consumer's Claude Code environment.

Mechanism

Recursive overwrite of project .claude/skills from the package.

Policy narrative

The package declares a postinstall hook that runs automatically during npm installation. That script uses npm's INIT_CWD to locate the consumer project, then recursively copies the package's .claude/skills tree into the consumer's .claude/skills directory. It overwrites existing files, changing a foreign AI-agent control surface without an explicit setup command. No lifecycle network or shell execution was found, but the automatic broad agent-configuration mutation is concrete install-hook abuse.

AI rationale

The automatic postinstall mutation of the consumer project's Claude skill directory meets the install-control-surface block policy. The absence of network activity does not neutralize the unconsented overwrite behavior.

Evidence

package.jsonscripts/copy-skills.cjs.claude/skills/**

Decision evidence

public snapshot

AI identified this as a at 98.0% confidence with false-positive risk.

Source & flagged code

5 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/copy-skills.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

scripts/copy-skills.cjsView file

2/** L3: * postinstall script — copies .claude/skills/ from this package L4: * into the consuming project's .claude/skills/ directory. L5: * ... L29: L30: const sourceSkills = path.join(__dirname, '..', '.claude', 'skills'); L31: const targetSkills = path.join(projectRoot, '.claude', 'skills'); L32: ... L42: function copyDirSync(src, dest) { L43: fs.mkdirSync(dest, { recursive: true }); L44: ... L51: } else {

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/copy-skills.cjsView on unpkg · L2

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. #!/usr/bin/env node const fs = require('fs'); const path = require('path'); const projectroot = process.env.init_cwd; if (!projectroot) { process.exit(0); } const packagejson = path.join(projectroot, 'package.json'); try { const pkg = json.parse(fs.readfilesync(packagejs

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

scripts/copy-skills.cjsView on unpkg

.claude/skills/firebase/cloud-functions/scripts/export_firestore.shView file

•path = .claude/skills/firebase/cloud-functions/scripts/export_firestore.sh kind = payload_in_excluded_dir sizeBytes = 3107 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.claude/skills/firebase/cloud-functions/scripts/export_firestore.shView on unpkg

•path = .claude/skills/firebase/cloud-functions/scripts/export_firestore.sh kind = build_helper sizeBytes = 3107 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

.claude/skills/firebase/cloud-functions/scripts/export_firestore.shView on unpkg

Source & flagged code

5 flagged

package.jsonView file

Lines 1-28json

1{

2 "name": "@xbg.solutions/bpsk-core",

3 "version": "2.2.0",

4 "description": "XBG Frontend Core - Base framework, types, stores, error handling, logging",

5 "main": "lib/index.js",

6 "types": "lib/index.d.ts",

7 "type": "module",

8 "files": [

9 "lib",

10 ".claude/skills",

11 "scripts/copy-skills.cjs"

12 ],

13 "scripts": {

14 "build": "tsc && node ../../scripts/add-js-extensions.mjs lib",

15 "build:watch": "tsc --watch",

16 "clean": "rm -rf lib .claude",

17 "prepublishOnly": "node scripts/bundle-skills.cjs && npm run build",

18 "postinstall": "node scripts/copy-skills.cjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L18

19 },

20 "publishConfig": {

21 "access": "public"

22 },

23 "peerDependencies": {

24 "svelte": "^5.0.0",

25 "@sveltejs/kit": "^2.0.0"

26 }

27}

28

scripts/copy-skills.cjsView file

Lines 1-22javascript

1#!/usr/bin/env node

2/**

3 * postinstall script — copies .claude/skills/ from this package

4 * into the consuming project's .claude/skills/ directory.

5 *

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/copy-skills.cjsView on unpkg · L2

6 * Uses INIT_CWD (set by npm to the directory where `npm install` was run)

7 * to locate the project root reliably, regardless of hoisting.

8 */

.claude/skills/firebase/cloud-functions/scripts/export_firestore.shView file

•path = .claude/skills/firebase/cloud-functions/scripts/export_firestore.sh kind = payload_in_excluded_dir sizeBytes = 3107 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.claude/skills/firebase/cloud-functions/scripts/export_firestore.shView on unpkg

•path = .claude/skills/firebase/cloud-functions/scripts/export_firestore.sh kind = build_helper sizeBytes = 3107 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

.claude/skills/firebase/cloud-functions/scripts/export_firestore.shView on unpkg