registry / AI-agent control-surface risk / analyzthis_design

analyzthis_design

8 AI design personas — v2.0 chunked execution with frontier planner + free/cheap chunk models, adversarial deliberation loops, opt-in community feedback, Kavi knowledge collection, DesignSpec producer path, wireframe skills, UX critique, Agent Skills for

This report shows the evidence for analyzthis_design@2.0.0. 2 of 12 known versions are blocked or flagged. The newest version, 2.5.2, is flagged. See all versions.

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

The postinstall hook performs unconsented, default-target installation into Cursor’s global skills directory. This meets the install-time foreign AI-agent control-surface mutation block policy despite no observed install-time network activity.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm postinstall

Impact

Unconsented mutation of a foreign AI-agent control surface; installed skills can affect subsequent agent behavior.

Mechanism

recursive copy of bundled skills into ~/.cursor/skills

Policy narrative

During npm postinstall, the package executes its installer. It selects detected agent targets, but falls back to Cursor when none are present, then copies its bundled skills into the selected host skill directory. This mutates a foreign AI-agent control surface without an explicit user command or target selection.

AI rationale

Evidence

package.jsondist/lib/install.jsdist/lib/platforms.jsskills/~/.cursor/skills

Decision evidence

public snapshot

AI identified this as a dangerous AI-agent capability at 98.0% confidence with low false-positive risk.

Evidence for policy risk

package.json runs dist/lib/install.js automatically in postinstall.
Install-time code defaults to Cursor when no supported target directory exists.
The default target is ~/.cursor/skills, a foreign AI-agent control surface.
Installer recursively copies bundled skills into target directories.

Evidence against

No network endpoint or credential-exfiltration path was found in the install hook.
The installer skips existing skill paths unless force is set.

Behavioral surface

Source

CryptoDynamicRequireEnvironmentVarsFilesystemNetwork

Supply chain

MinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 35 file(s), 269 KB of source, external domains: dribbble.com, example.com, github.com, www.google.com, www.npmjs.com

Source & flagged code

5 flagged

package.jsonView file

Lines 23-52json

23 "cost-optimization",

24 "effort-graded",

25 "lora"

26 ],

27 "author": "Rishikesh Joshi",

28 "license": "MIT",

29 "bin": {

30 "analyzthis_design": "dist/bin/cli.js"

31 },

32 "files": [

33 "dist/",

34 "skills/",

35 "agents/",

36 "supabase/",

37 ".github/",

38 "README.md"

39 ],

40 "scripts": {

41 "build": "node scripts/obfuscate.js",

42 "prepublishOnly": "npm run build",

43 "postinstall": "node dist/lib/install.js --silent --welcome"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L43

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L43

44 },

45 "engines": {

46 "node": ">=16"

47 },

48 "devDependencies": {

49 "javascript-obfuscator": "^5.4.7"

50 }

51}

dist/bin/cli.jsView file

Lines 1-2javascript

1#!/usr/bin/env node

2'use strict';const path=require('path'),os=require('os'),fs=require('fs'),{install,remove,SKILLS

dist/lib/query-expander.jsView file

Lines 1-1javascript

1'use strict';var fs=require('fs'),path=require('path'),os=require('os'),crypto=require('crypto'),cache=require('./cache'),{resolvePackageRoot}

dist/lib/install.jsView file

Lines 1-2javascript

1#!/usr/bin/env node

2'use strict';const fs=require('fs'),path=require('path'),os=require('os'),{TARGETS,TARGET_DIRS,ALL_TARGET_IDS

Source & flagged code

5 flagged · loading source

package.jsonView file

•scripts.postinstall = node dist/lib/install.js --silent --welcome

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node dist/lib/install.js --silent --welcome

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/bin/cli.jsView file

1#!/usr/bin/env node L2: 'use strict';const path=require('path'),os=require('os'),fs=require('fs'),{install,remove,SKILLS,TARGET_DIRS,printWelcomeBanner}=require('../lib/install'),{resolveTargets,ALL_TARGE...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/bin/cli.jsView on unpkg · L1

Findings

1 Critical1 High5 Medium5 Low

CriticalAi Agent Control Hijackdist/lib/install.js

HighInstall Time Lifecycle Scriptspackage.json

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumDynamic Requiredist/bin/cli.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowWeak Cryptodist/lib/query-expander.js

LowFilesystem

LowUrl Strings

Affected versions and remediation

This report applies to analyzthis_design@2.0.0.

The versions list below shows the verdict for each recorded version.

Avoid installing analyzthis_design@2.0.0. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-08-13 03:35:26.208Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

12 known versions

2.5.2latestSuspiciousAI-agent capability abuseWarnPublishedSep 28, 2026, 8:38 AM 2.5.1SuspiciousAgent extension lifecycle riskWarnPublishedSep 8, 2026, 9:44 AM 2.5.0SuspiciousAI-agent capability abuseWarnPublishedSep 2, 2026, 9:21 AM 2.4.1SuspiciousAgent extension lifecycle riskWarnPublishedSep 1, 2026, 9:54 AM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Behavioral surface

Source & flagged code

Related packages

Other AI-agent control-surface risk packages