bigpowers@2.88.4
73 agent skills synthesizing 17 years of software engineering discipline into a prescriptive methodology for solo developers
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe package has an explicit-user-command agent configuration capability and executable hooks, which merits a warning under the policy. The inspected source does not establish malicious automatic installation or a concrete harmful payload.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
The user runs bigpowers setup or bigpowers install, then the configured agent invokes an installed hook.
Impact
Installed hooks can influence supported AI-agent tool behavior until removed; the inspected hook delegates to a git guard script.
Mechanism
Explicit CLI symlink-based agent extension and hook installation.
AI rationale
The package has an explicit-user-command agent configuration capability and executable hooks, which merits a warning under the policy. The inspected source does not establish malicious automatic installation or a concrete harmful payload.
Evidence
bin/bigpowers.jsscripts/lib/install-helpers.js.gemini/extensions/bigpowers/hooks/before-tool-git-guard.shskills/visual-dashboard/scripts/server.cjs
Network endpoints1
127.0.0.1
Decision evidence
public snapshotAI called this Suspicious at 87.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The user-invoked setup command loads an installer that can modify agent-tool directories.
- The installer links package skills and executable hooks into Claude and Gemini configuration locations.
- The Gemini hook executes a package-provided guard script when the host invokes it.
- The dashboard starts an HTTP and WebSocket server; its bind host can be changed through an environment variable.
Evidence against
- package.json has no preinstall, install, or postinstall lifecycle hook.
- The configuration changes are reachable through explicit CLI setup or install commands, not package installation.
- The installer refuses to replace non-package-managed paths.
- No credential harvesting, outbound exfiltration, opaque payload download, or self-dependency was found in the inspected files.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
Source & flagged code
11 flagged · loading sourcebin/bigpowers.jsView file
5L6: const { execSync } = require('child_process');
L7: const fs = require('fs');
High
24try {
L25: execSync(cmd, { cwd, stdio: 'inherit' });
L26: } catch (e) {
...
L31:
L32: // True when this copy runs from the global npm install (not a git clone or npx temp dir).
L33: function isGlobalInstall() {
High
Runtime Package Install
Package source invokes a package manager install command at runtime.
bin/bigpowers.jsView on unpkg · L24•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 5
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
bin/bigpowers.jsView on unpkg5L6: const { execSync } = require('child_process');
L7: const fs = require('fs');
Findings
2 Critical7 High5 Medium4 Low
CriticalTrigger Reachable Excluded Directory Payloadscripts/lib/install-helpers.js
CriticalPrevious Version Dangerous Deltascripts/test-install-helpers.js
HighChild Processbin/bigpowers.js
HighShell
HighTrigger Reachable External Ai Agent Control Surface Mutationscripts/lib/install-helpers.js
HighRuntime Package Installbin/bigpowers.js
HighPayload In Excluded Dir.gemini/extensions/bigpowers/hooks/before-tool-git-guard.sh
HighSemantic Analysis Limitedbin/bigpowers.js
HighKnown Malware Source Similarityskills/visual-dashboard/scripts/server.cjs
MediumDynamic Requirebin/bigpowers.js
MediumNetwork
Affected versions and remediation
This report applies to bigpowers@2.88.4.
See all versions of bigpowers for other recorded verdicts.
- Review the evidence and your use of bigpowers@2.88.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.