chemx@26.9.13-632
Chemical X Protocol: Private drop-in architecture starter kit and capsule generator
AI Security Review
scanned 11d ago · by lpm-firewall-aiThe package has no install lifecycle hook in its manifest. Its explicit scaffold command writes project content and a Cursor rules file, which is an agent configuration change but is user-invoked and package-aligned; this supports a warning rather than a block.
Static reason
No blocking static signals were detected.
Trigger
A user runs the create command or invokes the CLI with a project name.
Impact
The generated project gains behavior-bearing Cursor guidance; no broader control-surface mutation or malicious effect was established.
Mechanism
The scaffold writes project files and adds a .cursorrules file containing project guidance.
AI rationale
The package has no install lifecycle hook in its manifest. Its explicit scaffold command writes project content and a Cursor rules file, which is an agent configuration change but is user-invoked and package-aligned; this supports a warning rather than a block.
Evidence
cli/index.jscli/scaffold.jscli/license.js.cursorrules
Network endpoints1
chemicalx.xophz.com
Decision evidence
public snapshotAI called this Suspicious at 86.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The manifest exposes a command-line entrypoint and declares no install lifecycle hook.
- The create command explicitly invokes scaffolding after the user supplies a command or project name.
- Scaffolding writes project files and adds a Chemical X rules file for Cursor when one is absent.
Evidence against
- No automatic install-time mutation or confirmed attack was identified in the inspected entrypoint and scaffold path.
- License verification sends the entered license key to the configured Chemical X service to retrieve starter files.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
5 flagged · loading sourcecli/navigator-share.jsView file
2import path from 'node:path';
L3: import { spawnSync } from 'node:child_process';
L4: import {
High
Child Process
Package source references child process execution.
cli/navigator-share.jsView on unpkg · L2cli/terminal.jsView file
10} else if (platform === "win32") {
L11: spawnSync("cmd.exe", ["/c", "start", '""', url], { stdio: "ignore" });
L12: } else {
High
cli/license.jsView file
3import os from 'node:os';
L4: import { spawnSync } from 'node:child_process';
L5: import {
...
L17:
L18: export const API_BASE = process.env.CHEMICAL_X_API_URL || 'https://chemicalx.xophz.com';
L19: export const GATEKEEPER_API_URL = process.env.COMPASS_GATEKEEPER_URL || 'https://mycompassconsulting.com/wp-json/compass/v1/gatekeeper';
Findings
4 High3 Medium5 Low
HighChild Processcli/navigator-share.js
HighShellcli/terminal.js
HighSame File Env Network Executioncli/license.js
HighTrigger Reachable External Ai Agent Control Surface Mutationcli/scaffold.js
MediumNetwork
MediumEnvironment Vars
MediumSuspicious Lifecycle Evidencepackage.json
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to chemx@26.9.13-632.
See all versions of chemx for other recorded verdicts.
- Review the evidence and your use of chemx@26.9.13-632 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.