registry / chemx / 26.9.11-481

chemx@26.9.11-481

Chemical X Protocol: Private drop-in architecture starter kit and capsule generator

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

There is no install-time execution or self-dependency chain. The flagged AI-editor configuration write is part of an explicit scaffolding command, rather than an unconsented lifecycle mutation.

Static reason

No blocking static signals were detected.

Trigger

A user runs scaffold, audit sharing, or hook setup commands.

Impact

The selected project may receive templates or optional configuration requested by the user.

Mechanism

User-invoked scaffolding, auditing, and optional report publishing.

AI rationale

There is no install-time execution or self-dependency chain. The flagged AI-editor configuration write is part of an explicit scaffolding command, rather than an unconsented lifecycle mutation.

Decision evidence

public snapshot

AI called this Clean at 90.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The manifest exposes CLI commands and contains no install lifecycle hook.
The AI-editor rule file is written only during an explicitly invoked scaffold operation.

Evidence against

Scaffolding fetches template files from the package service and writes them to the user-selected project directory.
The audit sharing feature can use a user-provided GitHub token to publish reports.

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 35 file(s), 218 KB of source, external domains: api.github.com, chemicalx.xophz.com, github.com, img.shields.io, mycompassconsulting.com

Source & flagged code

3 flagged

cli/scaffold.jsView file

Lines 27-67javascript

27 if (isDirNonEmpty) {

28 process.stderr.write(`\x1b[31m✕ Error: Directory '${finalDirName}' already exists and is not empty.\x1b[0m\n`);

29 process.exit(1);

30 }

32 const files = await fetchStarterKitFiles(licenseKey);

34 process.stdout.write(`Scaffolding Molecular Architecture into: \x1b[36m${finalDirName}/\x1b[0m\n`);

35 fs.mkdirSync(targetDir, { recursive: true });

37 for (const [relPath, content] of Object.entries(files)) {

38 const fullPath = path.join(targetDir, relPath);

39 const dirName = path.dirname(fullPath);

40 if (!fs.existsSync(dirName)) {

41 fs.mkdirSync(dirName, { recursive: true });

42 }

43 fs.writeFileSync(fullPath, content, 'utf-8');

44 process.stdout.write(` \x1b[32m✔\x1b[0m ${relPath}\n`);

45 }

47 const cursorRulesPath = path.join(targetDir, '.cursorrules');

48 if (!fs.existsSync(cursorRulesPath)) {

49 const rules = '# Chemical X Molecular Architecture Directives\nStrictly follow AGENTS.md rules. Never exceed 500 lines per file. All molecule capsules must stay under 100 lines.\n';

50 fs.writeFileSync(cursorRulesPath, rules, 'utf-8');

51 process.stdout.write(' \x1b[32m✔\x1b[0m .cursorrules\n');

Low

Ai Review Evidence

The AI-editor rule file is written only during an explicitly invoked scaffold operation.

cli/scaffold.jsView on unpkg · L47

52 }

54 process.stdout.write(

55 `\n\x1b[1m\x1b[32m✔ Molecular Architecture project created successfully at ${finalDirName}!\x1b[0m\n\n`

56 );

57 process.stdout.write('Next Steps:\n');

58 process.stdout.write(` 1. cd ${finalDirName}\n`);

59 process.stdout.write(' 2. Review AGENTS.md for line budgets and architecture standards\n');

60 process.stdout.write(' 3. Run npx chemx generate m-<feature> to create capsules\n');

61 process.stdout.write(' 4. Run npx chemx audit to scan for line budget compliance\n\n');

62};

64export const runInit = async (targetSubDir = 'src/chemical-x', rawArgs = [], onRunAudit = null) => {

65 renderBanner('Chemical X: In-Repo Capsule Drop-in');

67 const targetDir = path.resolve(process.cwd(), targetSubDir);

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. import fs from 'node:fs'; import path from 'node:path'; import { hasgum, guminput, promptquestion, renderbanner } from './terminal.js'; import { obtainlicensekey, fetchstarterkitfiles, checkorpromptevaluation } from './license.js'; export const runscaffold = async (projectname, rawargs = [], onrunaudit = null) => { renderbanner('chemical x: molecular architecture scaffolder (npm create chemx)'); const licensekey = await obtainlicensekey(rawargs, onrunaudit); if (!licensekey) { process.stderr.write('\x1b[31m✕ valid license key is required to scaffold blueprints.\x1b[0m\n'); process.exit(1); } let targetname = projectname; if (!targetname) { targetname =

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

cli/scaffold.jsView on unpkg

package.jsonView file

1{ "name": "chemx", "version": "26.9.11-481", "description": "Chemical X Protocol: Private drop-in architecture starter kit and capsule generator", "type": "module", "bin": { "chemx": "cli/index.js", "create-chemx": "cli/index.js" }

Low

Suspicious Lifecycle Evidence

The manifest exposes CLI commands and contains no install lifecycle hook.

package.jsonView on unpkg · L1

Source & flagged code

3 flagged · loading source

cli/scaffold.jsView file

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

cli/scaffold.jsView on unpkg

47const cursorRulesPath = path.join(targetDir, '.cursorrules'); if (!fs.existsSync(cursorRulesPath)) { const rules = '# Chemical X Molecular Architecture Directives\nStrictly follow AGENTS.md rules. Never exceed 500 lines per file. All molecule capsules must stay under 100 lines.\n'; fs.writeFileSync(cursorRulesPath, rules, 'utf-8'); process.stdout.write(' \x1b[32m✔\x1b[0m .cursorrules\n');

Low

Ai Review Evidence

The AI-editor rule file is written only during an explicitly invoked scaffold operation.

cli/scaffold.jsView on unpkg · L47

Findings

1 High2 Medium7 Low

HighTrigger Reachable External Ai Agent Control Surface Mutationcli/scaffold.js

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

LowSuspicious Lifecycle Evidencepackage.json

LowAi Review Evidencecli/scaffold.js

Affected versions and remediation

This report applies to chemx@26.9.11-481.

See all versions of chemx for other recorded verdicts.

Review the evidence and your use of chemx@26.9.11-481 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-11 08:10:51.222Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.