registry / analyzthis_design / 2.5.1

analyzthis_design@2.5.1

8 AI design personas — v2.5.1 anti-AI-slop & craftsmanship rules, v2.5.0 signed rate-based persona trust scoring, v2.2 project-scoped knowledge bank, v2.0 chunked execution with frontier planner + free/cheap chunk models, adversarial deliberation loops, o

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

The package has a user-invoked, multi-host AI-agent extension installer with automatic MCP configuration, creating meaningful control-surface risk. Its install lifecycle only logs instructions, so the evidence does not establish malicious install-hook abuse.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

The user runs the package CLI with no command or uses its install options.

Impact

The package can add prompt-bearing skills and an npx-launched MCP server to supported AI hosts.

Mechanism

AI-agent skill deployment and MCP configuration writes.

AI rationale

Evidence

dist/bin/cli.jsdist/lib/install.jsdist/lib/mcp-server.jsdist/lib/platforms.js~/.cursor/skills~/.claude/skills~/.claude/commands~/.codex/skills~/.grok/skills~/.codeium/windsurf/skills~/.agents/skills.mcp.json

Decision evidence

public snapshot

AI called this Suspicious at 87.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

The default CLI action installs bundled skills into external AI-agent directories.
The installer automatically registers an MCP server in supported host configuration files, including a project .mcp.json for Claude.
These writes are reachable from an explicit user CLI invocation, not from the npm lifecycle hook.

Evidence against

The postinstall lifecycle hook only prints usage instructions.
Feedback networking requires an explicit submit command and consent.
No self-dependency, obfuscated payload, credential harvesting, or automatic network activity was found.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 43 file(s), 466 KB of source, external domains: analyzthis-lab.vercel.app, dribbble.com, example.com, github.com, www.google.com, www.npmjs.com

Source & flagged code

7 flagged

package.jsonView file

•scripts.postinstall = node -e "console.log('\n analyzthis_design installed. Run: npx analyzthis_design --target all\n Or: npx analyzthis_design welcome\n')"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node -e "console.log('\n analyzthis_design installed. Run: npx analyzthis_design --target all\n Or: npx analyzthis_design welcome\n')"

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/bin/cli.jsView file

Lines 1-23javascript

1#!/usr/bin/env node

2'use strict';

4const path = require('path');

5const os = require('os');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/bin/cli.jsView on unpkg · L3

6const fs = require('fs');

7const { install, remove, SKILLS, TARGET_DIRS, printWelcomeBanner } = require('../lib/install');

8const { resolveTargets, ALL_TARGET_IDS } = require('../lib/platforms');

9const { connect, disconnect, sync, status } = require('../lib/knowledge');

10const session = require('../lib/session');

11const research = require('../lib/research');

12const retrieve = require('../lib/retrieve');

13const { exportTraining } = require('../lib/export');

14const feedback = require('../lib/feedback');

15const feedbackSubmit = require('../lib/feedback-submit');

16const cost = require('../lib/cost');

17const { collect } = require('../lib/collect');

18const designSpec = require('../lib/design-spec');

19const { run: orchestratorRun } = require('../lib/orchestrator/run');

20const hostLlm = require('../lib/host-llm');

21const moodboard = require('../lib/moodboard');

23const HELP = `

dist/lib/query-expander.jsView file

9L10: var PACKAGE_ROOT = resolvePackageRoot(__dirname); L11: var AGENTS_DIR = path.join(PACKAGE_ROOT, 'agents'); ... L15: if (!fs.existsSync(CONFIG_FILE)) return {}; L16: try { return JSON.parse(fs.readFileSync(CONFIG_FILE, 'utf8')); } L17: catch { return {}; }

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/lib/query-expander.jsView on unpkg · L9

dist/lib/install.jsView file

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. esync(srcpath, destpath); } } function installflat(skill, skillsdir, force) { const src = path.join(package_skills_dir, skill, 'skill.md'); const dest = path.join(skillsdir, `${skill}.md`); if (!fs.existssync(src)) return 'missing'; if (fs.existssync(dest) && !force) return 'skipped'; try { fs.mkdirsync(skillsdir, { recursive: true }); fs.copyfilesync(src, dest); return 'installed'; } catch { return 'error'; } } function installdir(skill, skillsdir, force) { const src = path.join(package_skills_dir, skill); const dest = path.join(skillsdir, skill); if (!fs.existssync(src)) return 'missing'; if (fs.existssync(dest) && !force) return 'skip

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/lib/install.jsView on unpkg

dist/lib/evolution-metrics.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/lib/evolution-metrics.js#virtual:normalized:round1View on unpkg

dist/lib/feedback-submit.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = analyzthis_design@2.4.1 matchedIdentity = npm:YW5hbHl6dGhpc19kZXNpZ24:2.4.1 similarity = 0.814 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/lib/feedback-submit.jsView on unpkg

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node -e "console.log('\n analyzthis_design installed. Run: npx analyzthis_design --target all\n Or: npx analyzthis_design welcome\n')"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node -e "console.log('\n analyzthis_design installed. Run: npx analyzthis_design --target all\n Or: npx analyzthis_design welcome\n')"

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/bin/cli.jsView file

3L4: const path = require('path'); L5: const os = require('os');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/bin/cli.jsView on unpkg · L3

Findings

4 High5 Medium6 Low

HighInstall Time Lifecycle Scriptspackage.json

HighTrigger Reachable External Ai Agent Control Surface Mutationdist/lib/install.js

HighSemantic Analysis Limiteddist/lib/evolution-metrics.js#virtual:normalized:round1

HighPrevious Version Dangerous Deltadist/lib/feedback-submit.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumDynamic Requiredist/bin/cli.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowWeak Cryptodist/lib/query-expander.js

LowFilesystem

Affected versions and remediation

This report applies to analyzthis_design@2.5.1.

See all versions of analyzthis_design for other recorded verdicts.

Review the evidence and your use of analyzthis_design@2.5.1 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-08 14:39:01.784Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.