registry / bigpowers / 2.88.2

bigpowers@2.88.2

73 agent skills synthesizing 17 years of software engineering discipline into a prescriptive methodology for solo developers

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

The package has an explicit, user-confirmed agent setup capability that can affect AI-agent control surfaces, so it warrants a warning. No automatic lifecycle hook, self-dependency chain, exfiltration, or external command-and-control behavior was found.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

The user runs bigpowers setup or update, selects a tool, and confirms setup; the dashboard starts only when its server script is invoked.

Impact

Installed hooks can influence supported agent tool behavior until the user uninstalls them; no automatic installation-time execution was found.

Mechanism

User-confirmed symlink installation of agent extensions and hooks.

AI rationale

Evidence

bin/setup.jsscripts/lib/install-helpers.js.gemini/extensions/bigpowers/hooks/before-tool-git-guard.shskills/visual-dashboard/scripts/server.cjs~/.gemini/config/plugins/bigpowers~/.gemini/hooks/before-tool-git-guard.sh/tmp/bigpowers-dashboard/content/tmp/bigpowers-dashboard/state

Network endpoints1

localhost:<random-port>

Decision evidence

public snapshot

AI called this Suspicious at 90.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

The explicit setup flow asks the user to select tools and confirm installation before it writes links.
The setup helper links a package-owned Gemini extension and several hooks into the user's Gemini configuration.
The Gemini hook executes the package's Git guard script before a tool action.
The dashboard starts an HTTP server on loopback by default.
The update command can run a global npm install of the same package when the user explicitly invokes update.

Evidence against

package.json has no preinstall, install, postinstall, or prepare lifecycle hook.
No secret harvesting, remote exfiltration, obfuscated payload loading, or self-dependency was found.
The dashboard binds to 127.0.0.1 by default and no external endpoint was found.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

Source & flagged code

10 flagged

bin/bigpowers.jsView file

Lines 1-44javascript

1#!/usr/bin/env node

2// story: e38s08

3// bigpowers CLI — detects install state, runs setup on demand.

4// No npm lifecycle scripts needed → bypasses npm v10+ allow-scripts gate.

6const { execSync } = require('child_process');

7const fs = require('fs');

High

Child Process

Package source references child process execution.

bin/bigpowers.jsView on unpkg · L5

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/bigpowers.jsView on unpkg · L5

8const os = require('os');

9const path = require('path');

11const ROOT = path.dirname(path.dirname(__filename));

12const SKILLS_MARKER = path.join(os.homedir(), '.claude', 'skills', 'survey-context');

13const pkg = require(path.join(ROOT, 'package.json'));

15function isInstalled() {

16 try {

17 return fs.lstatSync(SKILLS_MARKER).isSymbolicLink();

18 } catch {

19 return false;

20 }

21}

23function run(cmd, cwd = ROOT) {

24 try {

25 execSync(cmd, { cwd, stdio: 'inherit' });

26 } catch (e) {

27 console.error(`\n❌ Failed: ${cmd}`);

28 process.exit(1);

29 }

30}

32// True when this copy runs from the global npm install (not a git clone or npx temp dir).

33function isGlobalInstall() {

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/bigpowers.jsView on unpkg · L24

34 try {

35 const globalRoot = execSync('npm root -g', { encoding: 'utf8' }).trim();

36 return globalRoot && ROOT.startsWith(globalRoot);

37 } catch {

38 return false;

39 }

40}

42// `bigpowers update` used to only re-sync the already-installed files, so it never fetched

43// a newer release. When we're the global install, pull the latest from npm first; the reinstall

44// overwrites ROOT in place, so the setup.js required afterwards is the freshly installed one.

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 5

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

bin/bigpowers.jsView on unpkg

skills/visual-dashboard/scripts/server.cjsView file

Lines 1-21javascript

1const crypto = require('crypto');

2const http = require('http');

3const fs =

scripts/lib/install-helpers.jsView file

•path = scripts/lib/install-helpers.js kind = trigger_reachable_excluded_payload sizeBytes = 29742 triggerReachableSource = scripts/lib/install-helpers.js excludedPayload = .[redacted]-tool-git-guard.sh

Critical

Trigger Reachable Excluded Directory Payload

A package entrypoint or install-reachable source explicitly loads and activates an executable-looking payload from a test, fixture, or hidden path.

scripts/lib/install-helpers.jsView on unpkg

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. in(rendereddir, f), path.join(targetdir, f)); } } } { const agentssrc = path.join(reporoot, 'agents.md'); const agentsdst = path.join(homedir, '.kilocode', 'agents.md'); fs.mkdirsync(path.dirname(agentsdst), { recursive: true }); if (fs.existssync(agentssrc)) fs.copyfilesync(agentssrc, agentsdst); } break; case 'trae': linkrenderedskills(path.join(reporoot, '.trae/skills'), path.join(homedir, '.trae', 'skills')); { const agentssrc = path.join(reporoot, 'agents.md'); const agentsdst = path.join(homedir, '.trae', 'agents.md'); fs.mkdirsync(path.dirname

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

scripts/lib/install-helpers.jsView on unpkg

.gemini/extensions/bigpowers/hooks/before-tool-git-guard.shView file

•path = .[redacted]-tool-git-guard.sh kind = payload_in_excluded_dir sizeBytes = 669 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.gemini/extensions/bigpowers/hooks/before-tool-git-guard.shView on unpkg

•path = .[redacted]-tool-git-guard.sh kind = build_helper sizeBytes = 669 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

.gemini/extensions/bigpowers/hooks/before-tool-git-guard.shView on unpkg

Source & flagged code

10 flagged · loading source

bin/bigpowers.jsView file

5L6: const { execSync } = require('child_process'); L7: const fs = require('fs');

High

Child Process

Package source references child process execution.

bin/bigpowers.jsView on unpkg · L5

24try { L25: execSync(cmd, { cwd, stdio: 'inherit' }); L26: } catch (e) { ... L31: L32: // True when this copy runs from the global npm install (not a git clone or npx temp dir). L33: function isGlobalInstall() {

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/bigpowers.jsView on unpkg · L24

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 5

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

bin/bigpowers.jsView on unpkg

5L6: const { execSync } = require('child_process'); L7: const fs = require('fs');

Findings

1 Critical7 High5 Medium4 Low

CriticalTrigger Reachable Excluded Directory Payloadscripts/lib/install-helpers.js

HighChild Processbin/bigpowers.js

HighShell

HighTrigger Reachable External Ai Agent Control Surface Mutationscripts/lib/install-helpers.js

HighRuntime Package Installbin/bigpowers.js

HighPayload In Excluded Dir.gemini/extensions/bigpowers/hooks/before-tool-git-guard.sh

HighSemantic Analysis Limitedbin/bigpowers.js

HighKnown Malware Source Similarityskills/visual-dashboard/scripts/server.cjs

MediumDynamic Requirebin/bigpowers.js

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helper.gemini/extensions/bigpowers/hooks/before-tool-git-guard.sh

Affected versions and remediation

This report applies to bigpowers@2.88.2.

See all versions of bigpowers for other recorded verdicts.

Review the evidence and your use of bigpowers@2.88.2 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-07 09:02:38.555Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Runtime surface

Behavioral surface

Source & flagged code