achira-wf@5.2.0
Achira Workflow V5.2 — AI-driven development ecosystem with 21 specialist agents and 85 modern engineering & command skills.
AI Security Review
scanned 7d ago · by lpm-firewall-aiThe package has no lifecycle hook, and the flagged agent configuration writes are reached through explicit global install or sync commands. The Python finding is a design-system helper whose persistence option defaults off; inspected source supports a clean verdict.
Static reason
No blocking static signals were detected.
Trigger
A user runs `achira-wf global install` or `achira-wf global sync`.
Impact
This adds the requested package integration to the user's Gemini configuration; source inspection found no unconsented install-time mutation or other concrete attack.
Mechanism
The command installs the package-owned Gemini plugin, skills, and rules, then updates its marked section in the global rules file.
AI rationale
The package has no lifecycle hook, and the flagged agent configuration writes are reached through explicit global install or sync commands. The Python finding is a design-system helper whose persistence option defaults off; inspected source supports a clean verdict.
Evidence
lib/global-manager.jscli.js.achira/core/shared/ui-ux-pro-max/scripts/design_system.py
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest identifies cli.js as the package entry point and lists ordinary runtime dependencies.
- The package includes the .achira design-system helper; its generator defaults persistence off.
- The global manager writes package rules into the Gemini plugin and updates the marked section of the global GEMINI.md file.
- The global install behavior runs from the explicit `achira-wf global install` CLI command.
Evidence against
- The manifest has no lifecycle hook, so installation alone does not invoke the global configuration writes.
- The flagged Python helper is a design-system generator with persistence disabled by default; no concrete attack behavior was identified.
Behavioral surface
EnvironmentVarsFilesystemNetwork
HighEntropyStrings
Source & flagged code
7 flagged · loading sourcelib/global-manager.jsView file
•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation.
ntsrule = generateagentsrulemarkdown(achirasrc);
await fs.writefile(path.join(pluginrulesdir, "agents.md"), compiledagentsrule, "utf-8");
let existinggeminicontent = "";
if (fs.existssync(paths.geminimdpath)) {
existinggeminicontent = await fs.readfile(paths.geminimdpath, "utf-8");
}
const achiramarker = "<!-- achira-workflow-os-global-start -->";
const achiraendmarker = "<!-- achira-workflow-os-global-end -->";
const geminirulespath = path.join(achirasrc, "rules", "gemini.md");
let globalrulecontent = "";
if (fs.existssync(geminirulespath)) {
globalrulecontent = await fs.readfile
High
Trigger Reachable External Ai Agent Control Surface Mutation
Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.
lib/global-manager.jsView on unpkg218"AGENTS.md"), compiledAgentsRule, "utf-8");
// Update ~/.gemini/GEMINI.md with universal global rules
let existingGeminiContent = "";
if (fs.existsSync(paths.geminiMdPat
Low
Ai Review Evidence
The global manager writes package rules into the Gemini plugin and updates the marked section of the global GEMINI.md file.
lib/global-manager.jsView on unpkg · L218Findings
2 High4 Medium6 Low
HighTrigger Reachable External Ai Agent Control Surface Mutationlib/global-manager.js
HighPayload In Excluded Dir.achira/core/shared/ui-ux-pro-max/scripts/design_system.py
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helper.achira/core/shared/ui-ux-pro-max/scripts/design_system.py
MediumStructural Risk Force Deep Review
LowFilesystem
LowHigh Entropy Strings
LowSuspicious Dependency Evidencepackage.json
LowAi Review Evidence.achira/core/shared/ui-ux-pro-max/scripts/design_system.py
LowAi Review Evidencelib/global-manager.js
LowAi Review Evidencelib/global-manager.js
Affected versions and remediation
This report applies to achira-wf@5.2.0.
See all versions of achira-wf for other recorded verdicts.
- Review the evidence and your use of achira-wf@5.2.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.