registry / analyzthis_design / 2.4.1

analyzthis_design@2.4.1

8 AI design personas — v2.2 project-scoped knowledge bank (no cross-project vault entanglement), v2.0 chunked execution with frontier planner + free/cheap chunk models, adversarial deliberation loops, opt-in community feedback, Kavi knowledge collection,

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

This is a first-party agent extension installer with automatic MCP configuration after an explicit CLI invocation. Its install-time hook is inert, so the source does not establish malicious install-hook abuse.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

The user runs the package CLI with no command or with install.

Impact

It changes AI-agent skill and MCP control surfaces after the user invokes the package command.

Mechanism

First-party AI-agent extension installation and MCP configuration.

AI rationale

Evidence

dist/bin/cli.jsdist/lib/install.jsdist/lib/mcp-server.js~/.cursor/skills~/.claude/skills~/.claude/commands~/.codex/skills~/.grok/skills~/.codeium/windsurf/skills~/.agents/skills~/.cursor/mcp.json

Decision evidence

public snapshot

AI called this Suspicious at 86.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

The default CLI action runs the installer, which copies package skills into AI-tool directories.
The installer automatically writes an MCP server entry into Cursor, Claude, and Windsurf configuration after a user invokes installation.
The package can send prompts to configured LLM providers only during user-invoked runtime commands using supplied environment keys.

Evidence against

The postinstall hook only prints usage guidance and does not invoke the installer.
No install-time network request, credential harvesting, payload download, or shell execution was found.
Feedback submission requires configured settings and affirmative consent before sending data.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

Source & flagged code

7 flagged

package.jsonView file

•scripts.postinstall = node -e "console.log('\n analyzthis_design installed. Run: npx analyzthis_design --target all\n Or: npx analyzthis_design welcome\n')"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node -e "console.log('\n analyzthis_design installed. Run: npx analyzthis_design --target all\n Or: npx analyzthis_design welcome\n')"

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/bin/cli.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = analyzthis_design@2.3.0 matchedIdentity = npm:YW5hbHl6dGhpc19kZXNpZ24:2.3.0 similarity = 0.825 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/bin/cli.jsView on unpkg

3L4: const path = require('path'); L5: const os = require('os');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/bin/cli.jsView on unpkg · L3

dist/lib/query-expander.jsView file

9L10: var PACKAGE_ROOT = resolvePackageRoot(__dirname); L11: var AGENTS_DIR = path.join(PACKAGE_ROOT, 'agents'); ... L15: if (!fs.existsSync(CONFIG_FILE)) return {}; L16: try { return JSON.parse(fs.readFileSync(CONFIG_FILE, 'utf8')); } L17: catch { return {}; }

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/lib/query-expander.jsView on unpkg · L9

dist/lib/install.jsView file

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. esync(srcpath, destpath); } } function installflat(skill, skillsdir, force) { const src = path.join(package_skills_dir, skill, 'skill.md'); const dest = path.join(skillsdir, `${skill}.md`); if (!fs.existssync(src)) return 'missing'; if (fs.existssync(dest) && !force) return 'skipped'; try { fs.mkdirsync(skillsdir, { recursive: true }); fs.copyfilesync(src, dest); return 'installed'; } catch { return 'error'; } } function installdir(skill, skillsdir, force) { const src = path.join(package_skills_dir, skill); const dest = path.join(skillsdir, skill); if (!fs.existssync(src)) return 'missing'; if (fs.existssync(dest) && !force) return 'skip

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/lib/install.jsView on unpkg

dist/lib/feedback-submit.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/lib/feedback-submit.js#virtual:normalized:round1View on unpkg

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node -e "console.log('\n analyzthis_design installed. Run: npx analyzthis_design --target all\n Or: npx analyzthis_design welcome\n')"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node -e "console.log('\n analyzthis_design installed. Run: npx analyzthis_design --target all\n Or: npx analyzthis_design welcome\n')"

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/bin/cli.jsView file

High

Findings

4 High5 Medium6 Low

HighInstall Time Lifecycle Scriptspackage.json

HighTrigger Reachable External Ai Agent Control Surface Mutationdist/lib/install.js

HighSemantic Analysis Limiteddist/lib/feedback-submit.js#virtual:normalized:round1

HighPrevious Version Dangerous Deltadist/bin/cli.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumDynamic Requiredist/bin/cli.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowWeak Cryptodist/lib/query-expander.js

LowFilesystem

Low

Affected versions and remediation

This report applies to analyzthis_design@2.4.1.

See all versions of analyzthis_design for other recorded verdicts.

Review the evidence and your use of analyzthis_design@2.4.1 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-01 15:45:12.327Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.