baskreport-ai-report-generator@1.0.0: AI-agent control-surface | LPM Firewall

Loading npm security reports…

baskreport-ai-report-generator@1.0.0: AI-agent control-surface | LPM Firewall

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.postinstall = node dist/install.js --clients codebuddy,workbuddy || true

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node dist/install.js --clients codebuddy,workbuddy || true

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/cli/index.jsView file

3347init_esm_shims(); L3348: import { execSync } from "child_process"; L3349: import * as fs from "fs";

High

Child Process

Package source references child process execution.

dist/cli/index.jsView on unpkg · L3347

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/cli/index.js: import { existsSync, readFileSync, writeFileSync } from "fs"; const baseUrl = pickString( flag.baseUrl, json.baseUrl baseUrl: baseUrl ?? "", if (!auth.baseUrl) miss.push("baseUrl"); - \u65B9\u5F0F\u4E00\uFF08OAuth2\uFF09\uFF1A\u63D0\u4F9B --access-token / BASK_ACCESS_TOKEN\uFF08token \u7ECF Authorization header \u643A\u5E26\uFF09 - \u6216\u547D\u4EE4\u884C\u663E\u5F0F\u4F20 --${miss.map((m) => m === "baseUrl" ? "base-url" : m).join(" / --")}

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/cli/index.jsView on unpkg

3461console.log("\n[1/3] \u6784\u5EFA\u4EA7\u7269..."); L3462: execSync("npm install && npm run build", { cwd: skillRoot, stdio: "inherit" }); L3463: } else {

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/cli/index.jsView on unpkg · L3461

dist/install.jsView file

68function genClaudeCommand(projectRoot, body) { L69: const dir = path.join(projectRoot, ".claude", "commands"); L70: fs.mkdirSync(dir, { recursive: true }); L71: const out = path.join(dir, "baskreport.md"); ... L78: ].join("\n"); L79: fs.writeFileSync(out, header + body, "utf8"); L80: console.log(` \u5DF2\u751F\u6210: ${out}`); ... L83: const dir = path.join(projectRoot, ".cursor", "rules"); L84: fs.mkdirSync(dir, { recursive: true }); L85: const out = path.join(dir, "basksoft-ai.mdc"); ... L101: ].join("\n"); L102: fs.writeFileSync(out, fm + header + body, "utf8");

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

dist/install.jsView on unpkg · L68

scripts/install-skill.ps1View file

•path = scripts/install-skill.ps1 kind = build_helper sizeBytes = 8233 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/install-skill.ps1View on unpkg

scripts/xml-to-json.tsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

scripts/xml-to-json.tsView on unpkg

Source & flagged code

8 flagged

package.jsonView file

Lines 3-43json

3 "version": "1.0.0",

4 "description": "AI 报表生成器 Skill 包：将 LLM 产出的精简 JSON 中间层编译为 BaskReport 报表 XML，支持服务端写入与离线导出。",

5 "license": "MIT",

6 "type": "module",

7 "engines": {

8 "node": ">=18"

9 },

10 "bin": {

11 "baskreport": "dist/cli/index.js"

12 },

13 "files": [

14 "dist",

15 "SKILL.md",

16 "src",

17 "scripts"

18 ],

19 "scripts": {

20 "prebuild": "tsx scripts/extract-ai-view.ts --quiet",

21 "build": "tsup",

22 "prepublishOnly": "tsx scripts/extract-ai-view.ts --quiet && npm run build",

23 "postinstall": "node dist/install.js --clients codebuddy,workbuddy || true",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L23

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L23

24 "test": "vitest run",

25 "test:watch": "vitest",

26 "typecheck": "tsc --noEmit",

27 "xml2json": "tsx scripts/xml-to-json.ts",

28 "strip-base64": "tsx scripts/strip-base64.ts",

29 "install:skill": "tsx scripts/extract-ai-view.ts --quiet && tsx scripts/install-skill.ts --clients all",

30 "install:skill:build": "tsx scripts/extract-ai-view.ts --quiet && tsx scripts/install-skill.ts --clients all --build",

31 "uninstall:skill": "tsx scripts/install-skill.ts --uninstall --clients all"

32 },

33 "dependencies": {

34 "ajv": "^8.17.1",

35 "ajv-formats": "^3.0.1",

36 "commander": "^12.1.0",

37 "fast-xml-parser": "^4.5.7",

38 "undici": "^6.19.8",

39 "xmlbuilder2": "^3.1.1"

40 },

41 "devDependencies": {

42 "@types/node": "^20.19.43",

43 "tsup": "^8.2.4",

dist/cli/index.jsView file

Lines 3327-3367javascript

3327 ).action(async (opts) => {

3328 const s = await loginResolved(opts, "report \u547D\u4EE4");

3329

dist/install.jsView file

Lines 48-88javascript

48function isLink(targetPath) {

49 try {

50 return fs.lstatSync(targetPath).isSymbolicLink();

51 } catch {

52 return false

scripts/install-skill.ps1View file

•path = scripts/install-skill.ps1 kind = build_helper sizeBytes = 8233 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/install-skill.ps1View on unpkg

scripts/xml-to-json.tsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

scripts/xml-to-json.tsView on unpkg

Lines 3441-3481javascript

3441 ].join("\n");

3442 const header = [

3443 "<!--",

3444 "\u6B64\u6587\u4EF6\u7531 baskreport install \u81EA\u52A8\u751F\u6210\uFF1B\u5982\u9700\u4FEE\u6539\u8BF7\u6539 SKILL.md \u540E\u91CD\u8DD1\u3002",

3445 "-->",

3446 ""

3447 ].join("\n");

3448 fs.writeFileSync(out, fm + header + body, "utf8");

3449 console.log(` \u5DF2\u751F\u6210: ${out}`);

3450}

3451function runInstall(opts, skillRoot) {

3452 const skillMd = path2.join(skillRoot, "SKILL.md");

3453 if (!fs.existsSync(skillMd)) {

3454 throw new Error(`\u672A\u627E\u5230 SKILL.md\uFF0C\u8BF7\u786E\u8BA4\u8FD0\u884C\u76EE\u5F55\u6B63\u786E\u3002skillRoot=${skillRoot}`);

3455 }

3456 const skillName = path2.basename(skillRoot);

3457 console.log(`Skill \u540D\u79F0: ${skillName}`);

3458 console.log(`\u4ED3\u5E93\u8DEF\u5F84: ${skillRoot}`);

3459 console.log(`\u76EE\u6807\u5BA2\u6237\u7AEF: ${opts.clients.join(", ")}`);

3460 if (opts.build) {

3461 console.log("\n[1/3] \u6784\u5EFA\u4EA7\u7269...");

3462 execSync("npm install && npm run build", { cwd: skillRoot, stdio: "inherit" });

3463 } else {

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/cli/index.jsView on unpkg · L3461

3464 console.log("\n[1/3] \u8DF3\u8FC7\u6784\u5EFA");

3465 }

3466 const { description, body } = readSkillMeta(skillMd);

3467 console.log("[2/3] \u521B\u5EFA\u5BA2\u6237\u7AEF\u94FE\u63A5 / \u751F\u6210\u547D\u4EE4\u4E0E\u89C4\u5219...");

3468 const homeDir = os.homedir();

3469 for (const client of opts.clients) {

3470 if (client === "claude") {

3471 const root = opts.projectRoot ?? skillRoot;

3472 genClaudeCommand(root, body);

3473 continue;

3474 }

3475 if (client === "cursor") {

3476 const root = opts.projectRoot ?? skillRoot;

3477 genCursorRule(root, description, body);

3478 continue;

3479 }

3480 const skillsDir = path2.join(homeDir, `.${client}`, "skills");

3481 const linkPath = path2.join(skillsDir, skillName);