chemx@26.9.13-272
Chemical X Protocol: Private drop-in architecture starter kit and capsule generator
AI Security Review
scanned 11d ago · by lpm-firewall-aiThe source shows explicit project scaffolding that writes agent-facing configuration and remotely fetched files, creating a real but user-invoked capability risk. No automatic lifecycle trigger or concrete malicious behavior was established, so a warning is appropriate.
Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user runs chemx create or invokes the create-chemx command.
Impact
The generated files and rules may affect the project and its AI coding assistant, but no unconsented or install-time mutation was found.
Mechanism
The scaffold requests starter files from a configurable service and writes them into the selected directory; it also creates a Cursor rules file if absent.
AI rationale
The source shows explicit project scaffolding that writes agent-facing configuration and remotely fetched files, creating a real but user-invoked capability risk. No automatic lifecycle trigger or concrete malicious behavior was established, so a warning is appropriate.
Evidence
cli/index.jscli/scaffold.jscli/license.js
Network endpoints1
chemicalx.xophz.com
Decision evidence
public snapshotAI called this Suspicious at 87.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package exposes a CLI through the chemx and create-chemx commands.
- Scaffolding runs only through explicit CLI commands and obtains a license before proceeding.
- The scaffold writes a Cursor rules file containing project guidance when one is absent.
- The scaffold also downloads starter-kit files and writes them into the selected project directory.
- No install lifecycle hook is declared in the manifest.
- Browser launching and shell-based build execution are user-invoked utility behavior; no malicious use was established.
Evidence against
- The scaffold’s generated Cursor rules can influence an AI coding assistant in the target project.
- The starter-kit contents come from a configurable remote service and are written into the project without source-side content validation.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetworkShell
HighEntropyStrings
Source & flagged code
5 flagged · loading sourcecli/navigator-share.jsView file
2import path from 'node:path';
L3: import { spawnSync } from 'node:child_process';
L4: import {
High
Child Process
Package source references child process execution.
cli/navigator-share.jsView on unpkg · L2cli/terminal.jsView file
10} else if (platform === "win32") {
L11: spawnSync("cmd.exe", ["/c", "start", '""', url], { stdio: "ignore" });
L12: } else {
High
cli/license.jsView file
3import os from 'node:os';
L4: import { spawnSync } from 'node:child_process';
L5: import {
...
L17:
L18: export const API_BASE = process.env.CHEMICAL_X_API_URL || 'https://chemicalx.xophz.com';
L19: export const URL_LEARN = 'https://chemicalx.xophz.com';
Findings
5 High2 Medium5 Low
HighChild Processcli/navigator-share.js
HighShellcli/terminal.js
HighSame File Env Network Executioncli/license.js
HighTrigger Reachable External Ai Agent Control Surface Mutationcli/scaffold.js
HighPrevious Version Dangerous Deltacli/build/executor.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to chemx@26.9.13-272.
See all versions of chemx for other recorded verdicts.
- Review the evidence and your use of chemx@26.9.13-272 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.