chemx@26.10.10-75
Chemical X Protocol: Private drop-in architecture starter kit and capsule generator
AI Security Review
scanned 13d ago · by lpm-firewall-aiInspected source shows a postinstall hint and setup-time project configuration writes gated by --write. The flagged edit and agent configuration behavior does not establish an install-triggered attack.
Static reason
One or more suspicious static signals were detected.
Trigger
Package installation invokes postinstall; setup writes require an explicit --write option.
Impact
No confirmed harmful effect or unconsented control-surface mutation was established.
Mechanism
The postinstall script writes a message to stderr. The wizard plans project configuration and shim changes, then applies them only when the write gate passes.
AI rationale
Inspected source shows a postinstall hint and setup-time project configuration writes gated by --write. The flagged edit and agent configuration behavior does not establish an install-triggered attack.
Decision evidence
public snapshotAI called this Clean at 90.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json runs a postinstall script, and that script only writes a hint to stderr when invoked directly.
- The pillars wizard defaults to dry run and applies configuration changes only when explicitly passed --write.
- The wizard writes project configuration and agent shims through its setup path; its write gate requires a non-dry-run plan with no refusals.
- The edit path resolves requested files within the workspace before planning edits.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
9 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node cli/postinstall.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node cli/postinstall.js
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgcli/forge/fuzz/seeds.js#virtual:string-array:round1View file
21FN("export function host(d, o, f) { switch (d) { case 1: const k = o.x; f(k); case 2: return k; } }", "const k = 7; export function host(d, o, f) { switch (d) { case 1: f(o.x); cas...
L22: FN(fnBody("const y = 5; const k = eval; return k('typeof y');", ""), fnBody("const y = 5; return eval('typeof y');", "")),
L23: FN(fnBody("const n = u.name; return u && n;", "u"), fnBody("return u && u.name;", "u")),
Low
Findings
3 High7 Medium7 Low
HighInstall Time Lifecycle Scriptspackage.json
HighTrigger Reachable External Ai Agent Control Surface Mutationcli/pillars-wizard.js
HighSemantic Analysis Limitedcli/apply-edits.js#virtual:normalized:round1
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumDynamic Requirecli/network-recorder.fixture.mjs
MediumUnsafe Vm Contextcli/forge/fuzz/template-oracle.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperscripts/pre-commit.sh
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowEvalcli/forge/fuzz/seeds.js#virtual:string-array:round1
Affected versions and remediation
This report applies to chemx@26.10.10-75.
See all versions of chemx for other recorded verdicts.
- Review the evidence and your use of chemx@26.10.10-75 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.