Loading npm security reports…

arreio@1.0.0-dev.1: AI-agent control-surface risk | LPM Firewall

registry / arreio / 1.0.0-dev.1

arreio@1.0.0-dev.1

Arreio transforms agentic coding workflows into a predictable, safe, and high-quality software delivery pipeline. Master the four core phases—Plan, Work, Review, Learn—to orchestrate a highly reliable development cycle.

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Installing the package automatically creates and modifies the user's AI-agent skills directory. It copies the package's complete skills tree there without confirmation or containment to the consumer project.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm installation runs the postinstall lifecycle hook.

Impact

Package-controlled instructions become available to the user's AI-agent environment and can replace existing same-named skills.

Mechanism

Recursive install-time overwrite of a home-directory AI-agent skill tree.

Policy narrative

The package registers an automatic postinstall hook. That hook resolves the user's home directory, creates .agents if absent, and recursively copies all packaged skills into .agents/skills. Existing files with matching names are overwritten with no prompt, backup, or project-local scope. This is an unconsented install-time mutation of a broad AI-agent control surface.

AI rationale

The concrete postinstall behavior mutates a foreign, home-directory AI-agent skill surface automatically. The lack of network or secret theft does not neutralize that control-surface takeover risk.

Evidence

package.jsonscripts/postinstall.jsskills/$HOME/.agents$HOME/.agents/skills

Decision evidence

public snapshot

with false-positive risk.

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

33"scripts": { "postinstall": "node scripts/postinstall.js" }

High

Suspicious Lifecycle Evidence

The manifest runs a postinstall script automatically during installation.

package.jsonView on unpkg · L33

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

scripts/postinstall.jsView file

4* Post-install script for arreio L5: * Copies skills from the package to the user's .agents/skills directory L6: */ ... L14: const skillsSource = path.join(packageDir, 'skills'); L15: const agentsDir = path.join(os.homedir(), '.agents'); L16: const sk[redacted] = path.join(agentsDir, 'skills'); ... L20: if (!fs.existsSync(dest)) { L21: fs.mkdirSync(dest, { recursive: true }); L22: } ... L32: } else { L33: fs.copyFileSync(srcFile, destFile); L34: }

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/postinstall.jsView on unpkg · L4

12// Determine the source and destination paths const packageDir = path.dirname(__dirname); const skillsSource = path.join(packageDir, 'skills'); const agentsDir = path.join(os.homedir(), '.agents'); const sk[redacted] = path.join(agentsDir, 'skills');

High

Ai Review Evidence

The script targets the user's home .agents directory, an AI-agent control surface.

scripts/postinstall.jsView on unpkg · L12

24const files = fs.readdirSync(src); files.forEach(file => { const srcFile = path.join(src, file); const destFile = path.join(dest, file); const stat = fs.statSync(srcFile); if (stat.isDirectory()) { copyDirectory(srcFile, destFile); } else { fs.copyFileSync(srcFile, destFile); } });

High

Ai Review Evidence

The script recursively copies every packaged skill file and overwrites matching destination files without confirmation.

scripts/postinstall.jsView on unpkg · L24

39// Create .agents directory if it doesn't exist if (!fs.existsSync(agentsDir)) { fs.mkdirSync(agentsDir, { recursive: true }); } // Copy skills to .agents/skills copyDirectory(skillsSource, sk[redacted]); console.log(`✓ Arreio skills installed to ${sk[redacted]}`);

High

Ai Review Evidence

The script recursively copies every packaged skill file and overwrites matching destination files without confirmation.

scripts/postinstall.jsView on unpkg · L39

README.mdView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

README.mdView on unpkg