create-chemx@26.9.13-632
Chemical X Protocol: Private drop-in architecture starter kit and capsule generator
AI Security Review
scanned 11d ago · by lpm-firewall-aiThe flagged agent-facing configuration write is confined to explicit project scaffolding and contains project conventions. This is a warning-level agent capability because it mutates assistant-facing configuration, but source inspection did not establish malicious behavior.
Static reason
No blocking static signals were detected.
Trigger
A user invokes the create or scaffold CLI action.
Impact
The directives may influence an AI coding assistant operating in the generated project; inspected content sets project conventions.
Mechanism
The scaffold creates the target project and writes directives to .cursorrules if that file is absent; licensed setup can also request starter-kit files from the configured service.
AI rationale
The flagged agent-facing configuration write is confined to explicit project scaffolding and contains project conventions. This is a warning-level agent capability because it mutates assistant-facing configuration, but source inspection did not establish malicious behavior.
Evidence
cli/scaffold.jscli/license.jscli/navigator-share.jscli/terminal.js
Network endpoints2
chemicalx.xophz.comapi.github.com/graphql
Decision evidence
public snapshotAI called this Suspicious at 81.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package exposes a CLI whose create action runs the scaffold.
- The scaffold writes behavior-bearing directives to a project's .cursorrules file when one is absent.
- The scaffold also downloads starter-kit files using a supplied license key and device ID.
Evidence against
- The agent-facing write occurs during an explicit project scaffolding action, not an npm lifecycle hook.
- The inspected directives describe project conventions; no malicious instruction or broader agent-control mutation was identified.
- The share path publishes an audit report through GitHub's GraphQL API, while browser launch uses the selected URL.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
5 flagged · loading sourcecli/navigator-share.jsView file
2import path from 'node:path';
L3: import { spawnSync } from 'node:child_process';
L4: import {
High
Child Process
Package source references child process execution.
cli/navigator-share.jsView on unpkg · L2cli/terminal.jsView file
10} else if (platform === "win32") {
L11: spawnSync("cmd.exe", ["/c", "start", '""', url], { stdio: "ignore" });
L12: } else {
High
cli/license.jsView file
3import os from 'node:os';
L4: import { spawnSync } from 'node:child_process';
L5: import {
...
L17:
L18: export const API_BASE = process.env.CHEMICAL_X_API_URL || 'https://chemicalx.xophz.com';
L19: export const GATEKEEPER_API_URL = process.env.COMPASS_GATEKEEPER_URL || 'https://mycompassconsulting.com/wp-json/compass/v1/gatekeeper';
Findings
4 High3 Medium5 Low
HighChild Processcli/navigator-share.js
HighShellcli/terminal.js
HighSame File Env Network Executioncli/license.js
HighTrigger Reachable External Ai Agent Control Surface Mutationcli/scaffold.js
MediumNetwork
MediumEnvironment Vars
MediumAi Review Evidencepackage.json
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to create-chemx@26.9.13-632.
See all versions of create-chemx for other recorded verdicts.
- Review the evidence and your use of create-chemx@26.9.13-632 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.