registry / AI-agent capability abuse / analyzthis_design / 2.5.2

analyzthis_design@2.5.2

8 AI design personas — v2.5.2 motion/UX/visual library catalog and Kavi install detection, v2.5.1 anti-AI-slop craftsmanship, v2.5.0 signed rate-based persona trust scoring, v2.2 project-scoped knowledge bank, v2.0 chunked execution with frontier planner

AI Security Review

scanned 13d ago · by lpm-firewall-ai

Source inspection found agent skill and MCP configuration changes only in the explicit CLI installer; the npm postinstall hook merely prints a message. This is a guarded, user-invoked agent integration capability, so warn rather than block.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

A user runs the package CLI install command, or invokes the CLI without a command.

Impact

The selected AI host can load the package's skills and MCP server after configuration; source inspection did not establish an npm-install-triggered change or other active attack.

Mechanism

The installer copies bundled skill files and writes an analyzthis_design MCP server entry into supported host configuration.

AI rationale

Evidence

.claude/commands.cursor/commands~/.cursor/mcp.json~/.claude.json~/.codeium/windsurf/mcp_config.json

Decision evidence

public snapshot

AI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

The install command copies package skills into project and user AI-tool directories, and the install path configures an MCP server for supported hosts.
CLI install is activated by an explicit install command or by running the CLI without a command; package postinstall only prints guidance.
The MCP setup adds an analyzthis_design server entry that runs npx analyzthis_design mcp.
The cited knowledge and source-discovery locations describe project skill destinations and documentation scanning; they do not establish an independent control-surface attack.

Evidence against

The package postinstall hook only prints a message; it does not invoke the installer.
MCP configuration mutation is reached through the user-invoked CLI installer, not the npm lifecycle hook.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStrings

Source & flagged code

7 flagged

package.jsonView file

•scripts.postinstall = node -e "console.log('\n analyzthis_design installed. Run: npx analyzthis_design --target all\n Or: npx analyzthis_design welcome\n')"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node -e "console.log('\n analyzthis_design installed. Run: npx analyzthis_design --target all\n Or: npx analyzthis_design welcome\n')"

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/bin/cli.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = analyzthis_design@2.5.1 matchedIdentity = npm:YW5hbHl6dGhpc19kZXNpZ24:2.5.1 similarity = 0.488 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/bin/cli.jsView on unpkg

3L4: const path = require('path'); L5: const os = require('os');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/bin/cli.jsView on unpkg · L3

dist/lib/query-expander.jsView file

9L10: var PACKAGE_ROOT = resolvePackageRoot(__dirname); L11: var AGENTS_DIR = path.join(PACKAGE_ROOT, 'agents'); ... L15: if (!fs.existsSync(CONFIG_FILE)) return {}; L16: try { return JSON.parse(fs.readFileSync(CONFIG_FILE, 'utf8')); } L17: catch { return {}; }

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/lib/query-expander.jsView on unpkg · L9

dist/lib/install.jsView file

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. esync(srcpath, destpath); } } function installflat(skill, skillsdir, force) { const src = path.join(package_skills_dir, skill, 'skill.md'); const dest = path.join(skillsdir, `${skill}.md`); if (!fs.existssync(src)) return 'missing'; if (fs.existssync(dest) && !force) return 'skipped'; try { fs.mkdirsync(skillsdir, { recursive: true }); fs.copyfilesync(src, dest); return 'installed'; } catch { return 'error'; } } function installdir(skill, skillsdir, force) { const src = path.join(package_skills_dir, skill); const dest = path.join(skillsdir, skill); if (!fs.existssync(src)) return 'missing'; if (fs.existssync(dest) && !force) return 'skip

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/lib/install.jsView on unpkg

dist/lib/evolution-metrics.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/lib/evolution-metrics.js#virtual:normalized:round1View on unpkg

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node -e "console.log('\n analyzthis_design installed. Run: npx analyzthis_design --target all\n Or: npx analyzthis_design welcome\n')"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node -e "console.log('\n analyzthis_design installed. Run: npx analyzthis_design --target all\n Or: npx analyzthis_design welcome\n')"

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/bin/cli.jsView file

High

Findings

4 High5 Medium6 Low

HighInstall Time Lifecycle Scriptspackage.json

HighTrigger Reachable External Ai Agent Control Surface Mutationdist/lib/install.js

HighSemantic Analysis Limiteddist/lib/evolution-metrics.js#virtual:normalized:round1

HighPrevious Version Dangerous Deltadist/bin/cli.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumDynamic Requiredist/bin/cli.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowWeak Cryptodist/lib/query-expander.js

LowFilesystem

Low

Affected versions and remediation

This report applies to analyzthis_design@2.5.2.

See all versions of analyzthis_design for other recorded verdicts.

Review the evidence and your use of analyzthis_design@2.5.2 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-09 18:15:14.976Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.