Loading npm security reports…

bmad-speckit-sdd-flow@2.2.1: AI-agent control-surface risk | LPM Firewall

registry / bmad-speckit-sdd-flow / 2.2.1

bmad-speckit-sdd-flow@2.2.1

Agent governance and AI-TDD control plane for requirement-contract-driven Main Agent orchestration, built on BMAD + Spec-Kit

AI Security Review

scanned 27d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Installing the package automatically alters the consumer project's Cursor agent configuration and installs executable hooks. Those hooks inject package-controlled policy into agent sessions and can block tool use.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

npm installation triggers postinstall.

Impact

The package gains control over agent behavior in the consumer project without an explicit setup command.

Mechanism

Automatic deployment of Cursor hooks and policy injection.

Policy narrative

On installation, postinstall runs the initializer against the consumer root and defaults to Cursor. It copies runtime hook code into .cursor/hooks and writes a hooks configuration that invokes it during agent activity. The hook returns package-generated content as a system message or subagent context, allowing the package to impose governance policy and block work inside the consumer's AI-agent control surface.

AI rationale

This is an unconsented postinstall mutation of a broad consumer AI-agent control surface. The installed hooks actively inject policy into agent sessions, which meets the blocking policy even without confirmed network exfiltration.

Evidence

package.jsonscripts/init-to-root.js_bmad/runtime/hooks/runtime-policy-inject-core.cjs.cursor/hooks.cursor/hooks.json_bmad_bmad-output

Decision evidence

Source & flagged code

24 flagged

package.jsonView file

•scripts.postinstall = node scripts/init-to-root.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

_bmad/cursor/hooks/subagent-result-summary.cjsView file

5const path = require('node:path'); L6: const { spawnSync } = require('node:child_process'); L7:

High

Child Process

Package source references child process execution.

_bmad/cursor/hooks/subagent-result-summary.cjsView on unpkg · L5

_bmad/skills/governed-feature-delivery/scripts/run-phase.mjsView file

864function verifyCommand(repo, command) { L865: const result = spawnSync(command, { cwd: repo, shell: true, encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'], maxBuffer: 16 * 1024 * 1024 }); L866: return { status: result.status === 0 && !result.error ? 'pass' : 'fail', exitCode: result.status, signal: result.signal, output: `${result.stdout ?? ''}${result.stderr ?? ''}`, err...

High

Shell

Package source references shell execution.

_bmad/skills/governed-feature-delivery/scripts/run-phase.mjsView on unpkg · L864

bin/bmad-speckit.jsView file

4L5: const path = require('node:path'); L6: const fs = require('node:fs');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/bmad-speckit.jsView on unpkg · L4

node_modules/bmad-speckit/dist/services/install-surface-manifest.jsView file

43try { L44: return JSON.parse(fs.readFileSync(filePath, 'utf8')); L45: } ... L343: logicalPath: '_bmad', L344: kind: 'project_private_dir', L345: ownerAgents: normalizedTools, ... L544: const rest = raw.slice(1).replace(/^[/\\]/, '') || ''; L545: return rest ? path.join(require('os').homedir(), rest) : require('os').homedir(); L546: }

Low

Weak Crypto

Package source references weak cryptographic algorithms.

node_modules/bmad-speckit/dist/services/install-surface-manifest.jsView on unpkg · L43

scripts/init-to-root.jsView file

8* L9: * 鐢ㄩ€旓細閮ㄧ讲 BMAD 鐩綍缁撴瀯銆? * 瀵瑰閮ㄧ洰鏍囩洰褰曪細浠?@bmad-speckit/runtime-emit 灏?emit-runtime-policy.cjs銆乺esolve-for-session.cjs銆乺ender-audit-block.cjs 涓?write-runtime-context.cjs 澶嶅埗鍒?**.cur... L10: * CLI 鍙傛暟锛歔targetDir], --full, --agent cursor|claude-code|codex, --no-package-json, --with-package-json, --with-mcp ... L181: const cursorDir = path.join(targetDir, '.cursor'); L182: fs.mkdirSync(cursorDir, { recursive: true }); L183: const hooksJsonPath = path.join(cursorDir, 'hooks.json'); ... L201: }; L202: fs.writeFileSync(hooksJsonPath, `${JSON.stringify(hooksJson, null, 2)}\n`, 'utf8'); L203: } ... L212: { src: path.join(bmadRoot, 'speckit', 'commands'), dest: '.cursor/commands' }, L213: { src: path.join(bmadRoot, 'cursor', 'rules'), dest: '.cursor/rules' }, L214: { src: path.join(bmadRoo

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/init-to-root.jsView on unpkg · L8

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. totalfiles += copyskilldirsrecursive(path.join(bmadroot, 'core', 'tasks'), path.join(targetdir, '.claude', 'skills'), targetdir); totalfiles += copyskilldirsrecursive(path.join(bmadroot, 'core', 'skills'), path.join(targetdir, '.claude', 'skills'), targetdir); const settingssrc = path.join(bmadroot, 'claude', 'settings.json'); const settingsdest = path.join(targetdir, '.claude', 'settings.json'); if (fs.existssync(settingssrc)) { fs.mkdirsync(path.dirname(settingsdest), { recursive: true }); const bmadsettings = normalizeclaudehookcommand

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

node_modules/@bmad-speckit/runtime-emit/dist/run-auditor-host.cjsView file

15461const executeAuditorScript = deps.executeAuditorScript ?? ((args) => { L15462: (0, import_child_process.execSync)(`npx ts-node ${args.auditorScript} ${args.artifactPath} ${args.iteration}`, { L15463: cwd: args.projectRoot,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

node_modules/@bmad-speckit/runtime-emit/dist/run-auditor-host.cjsView on unpkg · L15461

_bmad/core/skills/bmad-distillator/scripts/tests/test_analyze_sources.pyView file

•path = _bmad/core/skills/bmad-distillator/scripts/tests/test_analyze_sources.py kind = payload_in_excluded_dir sizeBytes = 7723 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

_bmad/core/skills/bmad-distillator/scripts/tests/test_analyze_sources.pyView on unpkg

•path = _bmad/core/skills/bmad-distillator/scripts/tests/test_analyze_sources.py kind = build_helper sizeBytes = 7723 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

_bmad/core/skills/bmad-distillator/scripts/tests/test_analyze_sources.pyView on unpkg

node_modules/@bmad-speckit/runtime-emit/dist/emit-runtime-policy.cjsView file

•path = node_modules/@bmad-speckit/runtime-emit/dist/emit-runtime-policy.cjs kind = oversized_source_file sizeBytes = 4716009 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

node_modules/@bmad-speckit/runtime-emit/dist/emit-runtime-policy.cjsView on unpkg

_bmad/skills/requirements-contract-authoring/assets/mermaid/mermaid.min.jsView file

•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 40

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

_bmad/skills/requirements-contract-authoring/assets/mermaid/mermaid.min.jsView on unpkg

node_modules/bmad-speckit/_bmad/runtime/hooks/runtime-policy-inject-core.cjsView file

•matchType = normalized_sha256 matchedPackage = bmad-speckit-sdd-flow@2.1.12 matchedPath = _bmad/runtime/hooks/runtime-policy-inject-core.cjs matchedIdentity = npm:Ym1hZC1zcGVja2l0LXNkZC1mbG93:2.1.12 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/bmad-speckit/_bmad/runtime/hooks/runtime-policy-inject-core.cjsView on unpkg

node_modules/bmad-speckit/_bmad/claude/hooks/worktree-create-sibling.cjsView file

•matchType = normalized_sha256 matchedPackage = bmad-speckit-sdd-flow@2.1.12 matchedPath = _bmad/claude/hooks/worktree-create-sibling.cjs matchedIdentity = npm:Ym1hZC1zcGVja2l0LXNkZC1mbG93:2.1.12 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/bmad-speckit/_bmad/claude/hooks/worktree-create-sibling.cjsView on unpkg

node_modules/bmad-speckit/_bmad/skills/goal-execution-contract-generator/scripts/check-docs-review-dependency.jsView file

•matchType = normalized_sha256 matchedPackage = bmad-speckit-sdd-flow@2.1.12 matchedPath = _bmad/skills/goal-execution-contract-generator/scripts/check-docs-review-dependency.js matchedIdentity = npm:Ym1hZC1zcGVja2l0LXNkZC1mbG93:2.1.12 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/bmad-speckit/_bmad/skills/goal-execution-contract-generator/scripts/check-docs-review-dependency.jsView on unpkg

node_modules/bmad-speckit/_bmad/skills/goal-subcontract-execution-package-generator/scripts/close-completed-campaign.jsView file

•matchType = normalized_sha256 matchedPackage = bmad-speckit-sdd-flow@2.1.12 matchedPath = _bmad/skills/goal-subcontract-execution-package-generator/scripts/close-completed-campaign.js matchedIdentity = npm:Ym1hZC1zcGVja2l0LXNkZC1mbG93:2.1.12 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/bmad-speckit/_bmad/skills/goal-subcontract-execution-package-generator/scripts/close-completed-campaign.jsView on unpkg

node_modules/bmad-speckit/_bmad/skills/requirements-contract-authoring/assets/mermaid/mermaid.min.jsView file

•matchType = normalized_sha256 matchedPackage = bmad-speckit-sdd-flow@2.1.12 matchedPath = _bmad/skills/requirements-contract-[redacted].min.js matchedIdentity = npm:Ym1hZC1zcGVja2l0LXNkZC1mbG93:2.1.12 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/bmad-speckit/_bmad/skills/requirements-contract-authoring/assets/mermaid/mermaid.min.jsView on unpkg

node_modules/bmad-speckit/_bmad/skills/requirements-contract-authoring/scripts/reverse_audit_contract.jsView file

•matchType = normalized_sha256 matchedPackage = bmad-speckit-sdd-flow@2.1.12 matchedPath = _bmad/skills/requirements-contract-authoring/scripts/reverse_audit_contract.js matchedIdentity = npm:Ym1hZC1zcGVja2l0LXNkZC1mbG93:2.1.12 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/bmad-speckit/_bmad/skills/requirements-contract-authoring/scripts/reverse_audit_contract.jsView on unpkg

node_modules/bmad-speckit/_bmad/claude/hooks/subagent-result-summary.cjsView file

•matchType = normalized_sha256 matchedPackage = bmad-speckit-sdd-flow@2.1.12 matchedPath = _bmad/claude/hooks/subagent-result-summary.cjs matchedIdentity = npm:Ym1hZC1zcGVja2l0LXNkZC1mbG93:2.1.12 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/bmad-speckit/_bmad/claude/hooks/subagent-result-summary.cjsView on unpkg

node_modules/bmad-speckit/_bmad/runtime/hooks/governance-packet-hard-closeout.cjsView file

•matchType = normalized_sha256 matchedPackage = bmad-speckit-sdd-flow@2.1.12 matchedPath = _bmad/runtime/hooks/governance-packet-hard-closeout.cjs matchedIdentity = npm:Ym1hZC1zcGVja2l0LXNkZC1mbG93:2.1.12 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/bmad-speckit/_bmad/runtime/hooks/governance-packet-hard-closeout.cjsView on unpkg

node_modules/bmad-speckit/_bmad/runtime/hooks/pre-continue-check.cjsView file

•matchType = normalized_sha256 matchedPackage = bmad-speckit-sdd-flow@2.1.12 matchedPath = _bmad/runtime/hooks/pre-continue-check.cjs matchedIdentity = npm:Ym1hZC1zcGVja2l0LXNkZC1mbG93:2.1.12 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/bmad-speckit/_bmad/runtime/hooks/pre-continue-check.cjsView on unpkg

node_modules/bmad-speckit/_bmad/shared/goal-contract/scripts/extract-goal-contract-profile.jsView file

•matchType = normalized_sha256 matchedPackage = bmad-speckit-sdd-flow@2.1.12 matchedPath = _bmad/shared/goal-contract/scripts/extract-goal-contract-profile.js matchedIdentity = npm:Ym1hZC1zcGVja2l0LXNkZC1mbG93:2.1.12 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/bmad-speckit/_bmad/shared/goal-contract/scripts/extract-goal-contract-profile.jsView on unpkg

node_modules/bmad-speckit/_bmad/skills/requirements-contract-authoring/scripts/ingest-confirmation-event.jsView file

•matchType = normalized_sha256 matchedPackage = bmad-speckit-sdd-flow@2.1.12 matchedPath = _bmad/skills/requirements-contract-authoring/scripts/ingest-confirmation-event.js matchedIdentity = npm:Ym1hZC1zcGVja2l0LXNkZC1mbG93:2.1.12 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/bmad-speckit/_bmad/skills/requirements-contract-authoring/scripts/ingest-confirmation-event.jsView on unpkg

node_modules/bmad-speckit/_bmad/skills/requirements-contract-authoring/scripts/write-critical-auditor-no-new-gap-response.jsView file

•matchType = normalized_sha256 matchedPackage = bmad-speckit-sdd-flow@2.1.12 matchedPath = _bmad/skills/requirements-contract-authoring/scripts/write-critical-auditor-no-new-gap-response.js matchedIdentity = npm:Ym1hZC1zcGVja2l0LXNkZC1mbG93:2.1.12 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/bmad-speckit/_bmad/skills/requirements-contract-authoring/scripts/write-critical-auditor-no-new-gap-response.jsView on unpkg

Source & flagged code

24 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/init-to-root.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

_bmad/cursor/hooks/subagent-result-summary.cjsView file

5const path = require('node:path'); L6: const { spawnSync } = require('node:child_process'); L7:

High

Child Process

Package source references child process execution.

_bmad/cursor/hooks/subagent-result-summary.cjsView on unpkg · L5

_bmad/skills/governed-feature-delivery/scripts/run-phase.mjsView file

High

Shell

Package source references shell execution.

_bmad/skills/governed-feature-delivery/scripts/run-phase.mjsView on unpkg · L864

bin/bmad-speckit.jsView file

4L5: const path = require('node:path'); L6: const fs = require('node:fs');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/bmad-speckit.jsView on unpkg · L4

node_modules/bmad-speckit/dist/services/install-surface-manifest.jsView file

Low

Weak Crypto

Package source references weak cryptographic algorithms.

node_modules/bmad-speckit/dist/services/install-surface-manifest.jsView on unpkg · L43

scripts/init-to-root.jsView file

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/init-to-root.jsView on unpkg · L8

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

node_modules/@bmad-speckit/runtime-emit/dist/run-auditor-host.cjsView file

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

node_modules/@bmad-speckit/runtime-emit/dist/run-auditor-host.cjsView on unpkg · L15461

_bmad/core/skills/bmad-distillator/scripts/tests/test_analyze_sources.pyView file

•path = _bmad/core/skills/bmad-distillator/scripts/tests/test_analyze_sources.py kind = payload_in_excluded_dir sizeBytes = 7723 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

_bmad/core/skills/bmad-distillator/scripts/tests/test_analyze_sources.pyView on unpkg

•path = _bmad/core/skills/bmad-distillator/scripts/tests/test_analyze_sources.py kind = build_helper sizeBytes = 7723 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

_bmad/core/skills/bmad-distillator/scripts/tests/test_analyze_sources.pyView on unpkg

node_modules/@bmad-speckit/runtime-emit/dist/emit-runtime-policy.cjsView file

•path = node_modules/@bmad-speckit/runtime-emit/dist/emit-runtime-policy.cjs kind = oversized_source_file sizeBytes = 4716009 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

node_modules/@bmad-speckit/runtime-emit/dist/emit-runtime-policy.cjsView on unpkg

_bmad/skills/requirements-contract-authoring/assets/mermaid/mermaid.min.jsView file

•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 40

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

_bmad/skills/requirements-contract-authoring/assets/mermaid/mermaid.min.jsView on unpkg

node_modules/bmad-speckit/_bmad/runtime/hooks/runtime-policy-inject-core.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/bmad-speckit/_bmad/runtime/hooks/runtime-policy-inject-core.cjsView on unpkg

node_modules/bmad-speckit/_bmad/claude/hooks/worktree-create-sibling.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/bmad-speckit/_bmad/claude/hooks/worktree-create-sibling.cjsView on unpkg

node_modules/bmad-speckit/_bmad/skills/goal-execution-contract-generator/scripts/check-docs-review-dependency.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/bmad-speckit/_bmad/skills/goal-execution-contract-generator/scripts/check-docs-review-dependency.jsView on unpkg

node_modules/bmad-speckit/_bmad/skills/goal-subcontract-execution-package-generator/scripts/close-completed-campaign.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/bmad-speckit/_bmad/skills/goal-subcontract-execution-package-generator/scripts/close-completed-campaign.jsView on unpkg

node_modules/bmad-speckit/_bmad/skills/requirements-contract-authoring/assets/mermaid/mermaid.min.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/bmad-speckit/_bmad/skills/requirements-contract-authoring/assets/mermaid/mermaid.min.jsView on unpkg

node_modules/bmad-speckit/_bmad/skills/requirements-contract-authoring/scripts/reverse_audit_contract.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/bmad-speckit/_bmad/skills/requirements-contract-authoring/scripts/reverse_audit_contract.jsView on unpkg

node_modules/bmad-speckit/_bmad/claude/hooks/subagent-result-summary.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/bmad-speckit/_bmad/claude/hooks/subagent-result-summary.cjsView on unpkg

node_modules/bmad-speckit/_bmad/runtime/hooks/governance-packet-hard-closeout.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/bmad-speckit/_bmad/runtime/hooks/governance-packet-hard-closeout.cjsView on unpkg

node_modules/bmad-speckit/_bmad/runtime/hooks/pre-continue-check.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/bmad-speckit/_bmad/runtime/hooks/pre-continue-check.cjsView on unpkg

node_modules/bmad-speckit/_bmad/shared/goal-contract/scripts/extract-goal-contract-profile.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/bmad-speckit/_bmad/shared/goal-contract/scripts/extract-goal-contract-profile.jsView on unpkg

node_modules/bmad-speckit/_bmad/skills/requirements-contract-authoring/scripts/ingest-confirmation-event.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/bmad-speckit/_bmad/skills/requirements-contract-authoring/scripts/ingest-confirmation-event.jsView on unpkg

node_modules/bmad-speckit/_bmad/skills/requirements-contract-authoring/scripts/write-critical-auditor-no-new-gap-response.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/bmad-speckit/_bmad/skills/requirements-contract-authoring/scripts/write-critical-auditor-no-new-gap-response.jsView on unpkg

Findings

1 Critical19 High6 Medium6 Low

CriticalAi Agent Control Hijackscripts/init-to-root.js

HighInstall Time Lifecycle Scriptspackage.json

HighChild Process_bmad/cursor/hooks/subagent-result-summary.cjs

HighShell_bmad/skills/governed-feature-delivery/scripts/run-phase.mjs

HighTrigger Reachable External Ai Agent Control Surface Mutationscripts/init-to-root.js

HighRuntime Package Installnode_modules/@bmad-speckit/runtime-emit/dist/run-auditor-host.cjs

HighPayload In Excluded Dir_bmad/core/skills/bmad-distillator/scripts/tests/test_analyze_sources.py

HighSemantic Analysis Limited_bmad/skills/requirements-contract-authoring/assets/mermaid/mermaid.min.js

HighKnown Malware Source Similaritynode_modules/bmad-speckit/_bmad/runtime/hooks/runtime-policy-inject-core.cjs

HighKnown Malware Source Similaritynode_modules/bmad-speckit/_bmad/claude/hooks/worktree-create-sibling.cjs

HighKnown Malware Source Similaritynode_modules/bmad-speckit/_bmad/skills/goal-execution-contract-generator/scripts/check-docs-review-dependency.js

HighKnown Malware Source Similaritynode_modules/bmad-speckit/_bmad/skills/goal-subcontract-execution-package-generator/scripts/close-completed-campaign.js

HighKnown Malware Source Similaritynode_modules/bmad-speckit/_bmad/skills/requirements-contract-authoring/assets/mermaid/mermaid.min.js

HighKnown Malware Source Similaritynode_modules/bmad-speckit/_bmad/skills/requirements-contract-authoring/scripts/reverse_audit_contract.js

HighKnown Malware Source Similaritynode_modules/bmad-speckit/_bmad/claude/hooks/subagent-result-summary.cjs

HighKnown Malware Source Similaritynode_modules/bmad-speckit/_bmad/runtime/hooks/governance-packet-hard-closeout.cjs

HighKnown Malware Source Similaritynode_modules/bmad-speckit/_bmad/runtime/hooks/pre-continue-check.cjs

HighKnown Malware Source Similaritynode_modules/bmad-speckit/_bmad/shared/goal-contract/scripts/extract-goal-contract-profile.js

HighKnown Malware Source Similaritynode_modules/bmad-speckit/_bmad/skills/requirements-contract-authoring/scripts/ingest-confirmation-event.js

HighKnown Malware Source Similaritynode_modules/bmad-speckit/_bmad/skills/requirements-contract-authoring/scripts/write-critical-auditor-no-new-gap-response.js

MediumDynamic Requirebin/bmad-speckit.js

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helper_bmad/core/skills/bmad-distillator/scripts/tests/test_analyze_sources.py

MediumOversized Source Filenode_modules/@bmad-speckit/runtime-emit/dist/emit-runtime-policy.cjs

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowWeak Cryptonode_modules/bmad-speckit/dist/services/install-surface-manifest.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

24 flagged

package.jsonView file

•scripts.postinstall = node scripts/init-to-root.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

_bmad/cursor/hooks/subagent-result-summary.cjsView file

5const path = require('node:path'); L6: const { spawnSync } = require('node:child_process'); L7:

High

Child Process

Package source references child process execution.

_bmad/cursor/hooks/subagent-result-summary.cjsView on unpkg · L5

_bmad/skills/governed-feature-delivery/scripts/run-phase.mjsView file

High

Shell

Package source references shell execution.

_bmad/skills/governed-feature-delivery/scripts/run-phase.mjsView on unpkg · L864

bin/bmad-speckit.jsView file

4L5: const path = require('node:path'); L6: const fs = require('node:fs');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/bmad-speckit.jsView on unpkg · L4

node_modules/bmad-speckit/dist/services/install-surface-manifest.jsView file

Low

Weak Crypto

Package source references weak cryptographic algorithms.

node_modules/bmad-speckit/dist/services/install-surface-manifest.jsView on unpkg · L43

scripts/init-to-root.jsView file

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/init-to-root.jsView on unpkg · L8

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

node_modules/@bmad-speckit/runtime-emit/dist/run-auditor-host.cjsView file

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

node_modules/@bmad-speckit/runtime-emit/dist/run-auditor-host.cjsView on unpkg · L15461

_bmad/core/skills/bmad-distillator/scripts/tests/test_analyze_sources.pyView file

•path = _bmad/core/skills/bmad-distillator/scripts/tests/test_analyze_sources.py kind = payload_in_excluded_dir sizeBytes = 7723 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

_bmad/core/skills/bmad-distillator/scripts/tests/test_analyze_sources.pyView on unpkg

•path = _bmad/core/skills/bmad-distillator/scripts/tests/test_analyze_sources.py kind = build_helper sizeBytes = 7723 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

_bmad/core/skills/bmad-distillator/scripts/tests/test_analyze_sources.pyView on unpkg

node_modules/@bmad-speckit/runtime-emit/dist/emit-runtime-policy.cjsView file

•path = node_modules/@bmad-speckit/runtime-emit/dist/emit-runtime-policy.cjs kind = oversized_source_file sizeBytes = 4716009 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

node_modules/@bmad-speckit/runtime-emit/dist/emit-runtime-policy.cjsView on unpkg

_bmad/skills/requirements-contract-authoring/assets/mermaid/mermaid.min.jsView file

•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 40

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

_bmad/skills/requirements-contract-authoring/assets/mermaid/mermaid.min.jsView on unpkg

node_modules/bmad-speckit/_bmad/runtime/hooks/runtime-policy-inject-core.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/bmad-speckit/_bmad/runtime/hooks/runtime-policy-inject-core.cjsView on unpkg

node_modules/bmad-speckit/_bmad/claude/hooks/worktree-create-sibling.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/bmad-speckit/_bmad/claude/hooks/worktree-create-sibling.cjsView on unpkg

node_modules/bmad-speckit/_bmad/skills/goal-execution-contract-generator/scripts/check-docs-review-dependency.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/bmad-speckit/_bmad/skills/goal-execution-contract-generator/scripts/check-docs-review-dependency.jsView on unpkg

node_modules/bmad-speckit/_bmad/skills/goal-subcontract-execution-package-generator/scripts/close-completed-campaign.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/bmad-speckit/_bmad/skills/goal-subcontract-execution-package-generator/scripts/close-completed-campaign.jsView on unpkg

node_modules/bmad-speckit/_bmad/skills/requirements-contract-authoring/assets/mermaid/mermaid.min.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/bmad-speckit/_bmad/skills/requirements-contract-authoring/assets/mermaid/mermaid.min.jsView on unpkg

node_modules/bmad-speckit/_bmad/skills/requirements-contract-authoring/scripts/reverse_audit_contract.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/bmad-speckit/_bmad/skills/requirements-contract-authoring/scripts/reverse_audit_contract.jsView on unpkg

node_modules/bmad-speckit/_bmad/claude/hooks/subagent-result-summary.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/bmad-speckit/_bmad/claude/hooks/subagent-result-summary.cjsView on unpkg

node_modules/bmad-speckit/_bmad/runtime/hooks/governance-packet-hard-closeout.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/bmad-speckit/_bmad/runtime/hooks/governance-packet-hard-closeout.cjsView on unpkg

node_modules/bmad-speckit/_bmad/runtime/hooks/pre-continue-check.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/bmad-speckit/_bmad/runtime/hooks/pre-continue-check.cjsView on unpkg

node_modules/bmad-speckit/_bmad/shared/goal-contract/scripts/extract-goal-contract-profile.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/bmad-speckit/_bmad/shared/goal-contract/scripts/extract-goal-contract-profile.jsView on unpkg

node_modules/bmad-speckit/_bmad/skills/requirements-contract-authoring/scripts/ingest-confirmation-event.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/bmad-speckit/_bmad/skills/requirements-contract-authoring/scripts/ingest-confirmation-event.jsView on unpkg

node_modules/bmad-speckit/_bmad/skills/requirements-contract-authoring/scripts/write-critical-auditor-no-new-gap-response.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/bmad-speckit/_bmad/skills/requirements-contract-authoring/scripts/write-critical-auditor-no-new-gap-response.jsView on unpkg

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code