registry / chemx / 26.9.14-205

chemx@26.9.14-205

Chemical X Protocol: Private drop-in architecture starter kit and capsule generator

AI Security Review

scanned 11d ago · by lpm-firewall-ai

The manifest has no install lifecycle hook, and the flagged configuration writes are part of a user-invoked project scaffolding flow. Network and process calls inspected support license validation, GitHub sharing, repository detection, and browser opening; no concrete malicious behavior was established.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

A user runs the chemx CLI and selects a command; sharing and license verification occur within their respective flows.

Impact

These flows perform their described CLI functions; inspected source did not establish a concrete attack surface.

Mechanism

Scaffolding writes blueprint files into the chosen project directory. License validation sends the supplied or cached key and device identifier to the configured service; sharing prepares an audit post for GitHub Discussions.

AI rationale

Evidence

package.jsoncli/navigator-share.jscli/terminal.jscli/license.jscli/scaffold.jscli/audit/social-git.js

Network endpoints3

chemicalx.xophz.commycompassconsulting.comapi.github.com

Decision evidence

public snapshot

AI called this Clean at 91.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json exposes the CLI through bin entries and lists no install lifecycle hook.
The share flow builds a GitHub Discussions post from an audit report after collecting project details.
Browser launching passes a URL to the platform opener with a timeout.
License verification sends the entered or cached license key and device identifier to the configured service.
Scaffolding targets a user-named project directory and avoids writing into a nonempty directory.
Git repository detection reads the origin remote through bounded git commands.

Evidence against

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 58 file(s), 366 KB of source, external domains: api.github.com, chemicalx.xophz.com, github.com, img.shields.io, mycompassconsulting.com, www.w3.org

Source & flagged code

5 flagged

cli/navigator-share.jsView file

Lines 1-22javascript

1import fs from 'node:fs';

2import path from 'node:path';

3import { spawnSync } from 'node:child_process';

4import {

High

Child Process

Package source references child process execution.

cli/navigator-share.jsView on unpkg · L2

5 hasGum,

6 gumChoose,

7 gumInput,

8 promptQuestion,

9 openBrowser

10} from './terminal.js';

11import {

12 detectGitRepoInfo,

13 detectGitHubUser,

14 getAuditBaseline,

15 createSnapshotFromReport,

16 getAuditHistory,

17 generateTransformationDiscussionContent,

18 generateDiscussionContent,

19 publishDiscussion,

20 publishOrUpdateDiscussion,

21 getStoredDiscussion,

22 copyToClipboard,

cli/terminal.jsView file

Lines 1-30javascript

1import readline from "node:readline";

2import { spawnSync } from "node:child_process";

3import { formatChemicalXGradient, ANSI } from "./theme.js";

5export const openBrowser

cli/license.jsView file

Lines 1-23javascript

1import fs from 'node:fs';

2import path from 'node:path';

3import os from 'node:os';

4import { spawnSync } from 'node:child_process';

cli/scaffold.jsView file

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. import fs from 'node:fs'; import path from 'node:path'; import { hasgum, guminput, promptquestion, renderbanner } from './terminal.js'; import { obtainlicensekey, fetchstarterkitfiles, loadlocalblueprintfiles } from './license.js'; export const runscaffold = async (projectname, rawargs = [], onrunaudit = null) => { renderbanner('chemical x: molecular architecture scaffolder (npm create chemx)'); const licensekey = await obtainlicensekey(rawargs, onrunaudit); let iscommunity = false; let files = {}; if (!licensekey) { process.stdout.write( '\n\x1b[38;2;98;201;255m⚡ chemical x: community edition (free)\x1b[0m\n' + 'the community version is free because

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

cli/scaffold.jsView on unpkg

cli/audit/social-git.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = chemx@26.9.13-632 matchedIdentity = npm:Y2hlbXg:26.9.13-632 similarity = 0.911 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

cli/audit/social-git.jsView on unpkg

Source & flagged code

5 flagged · loading source

cli/navigator-share.jsView file

2import path from 'node:path'; L3: import { spawnSync } from 'node:child_process'; L4: import {

High

Child Process

Package source references child process execution.

cli/navigator-share.jsView on unpkg · L2

cli/terminal.jsView file

10} else if (platform === "win32") { L11: spawnSync("cmd.exe", ["/c", "start", '""', url], { stdio: "ignore", timeout: 3000 }); L12: } else {

High

Shell

Package source references shell execution.

cli/terminal.jsView on unpkg · L10

cli/license.jsView file

3import os from 'node:os'; L4: import { spawnSync } from 'node:child_process'; L5: import { ... L17: L18: export const API_BASE = process.env.CHEMICAL_X_API_URL || 'https://chemicalx.xophz.com'; L19: export const GATEKEEPER_API_URL = process.env.COMPASS_GATEKEEPER_URL || 'https://mycompassconsulting.com/wp-json/compass/v1/gatekeeper';

Findings

5 High2 Medium5 Low

HighChild Processcli/navigator-share.js

HighShellcli/terminal.js

HighSame File Env Network Executioncli/license.js

HighTrigger Reachable External Ai Agent Control Surface Mutationcli/scaffold.js

HighPrevious Version Dangerous Deltacli/audit/social-git.js

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Affected versions and remediation

This report applies to chemx@26.9.14-205.

See all versions of chemx for other recorded verdicts.

Review the evidence and your use of chemx@26.9.14-205 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-12 06:57:31.666Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.