Loading npm security reports…

cursor-package-funtech: AI-agent control-surface risk | LPM Firewall

registry / cursor-package-funtech / 1.0.5

cursor-package-funtech@1.0.5

Cursor rules and skills (.cursor) for React + Vite + SCSS projects

AI Security Review

scanned 19d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Automatic npm installation alters the consumer project's Cursor control surface and commit hooks. The copied hook can run project scanning and deny git commits.

Static reason

One or more suspicious static signals were detected.

Trigger

npm postinstall

Impact

A package installation can overwrite .cursor content, add a runnable script, hide that content in .gitignore, and make commits subject to package-controlled checks.

Mechanism

Forced project configuration copy plus package and Git-hook mutation

Policy narrative

On npm postinstall, the package resolves the consumer project and force-copies its .cursor directory. It then changes the consumer package.json, adds .cursor to .gitignore, and appends or creates a Husky pre-commit hook. The installed Cursor hook runs on git commit; its review program can create reports and return a failure that blocks commits. This is an unconsented install-time mutation of foreign AI-agent and Git control surfaces.

AI rationale

The automatic lifecycle hook performs broad, forced mutation of the consuming project's Cursor and commit-control configuration. This meets the install-control-surface blocking policy despite the absence of network exfiltration.

Evidence

package.jsonscripts/install.js.cursor/hooks.json.cursor/hooks/rules-review.py.cursor.gitignore.husky/pre-commit.cursor/reviews/project.auto.md

Decision evidence

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./scripts/install.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

30"scripts": { "postinstall": "node ./scripts/install.js", "install-cursor": "node ./scripts/install.js" }

High

Ai Review Evidence

The manifest automatically runs the installer after npm installation.

package.jsonView on unpkg · L30

•scripts.postinstall = node ./scripts/install.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

.cursor/hooks/rules-review.pyView file

•path = .cursor/hooks/rules-review.py kind = payload_in_excluded_dir sizeBytes = 10407 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.cursor/hooks/rules-review.pyView on unpkg

•path = .cursor/hooks/rules-review.py kind = build_helper sizeBytes = 10407 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

.cursor/hooks/rules-review.pyView on unpkg

scripts/install.jsView file

•path = scripts/install.js kind = trigger_reachable_excluded_payload sizeBytes = 5138 triggerReachableSource = scripts/install.js excludedPayload = .cursor/hooks/rules-review.py

Critical

Trigger Reachable Excluded Directory Payload

A package entrypoint or install-reachable source explicitly loads and activates an executable-looking payload from a test, fixture, or hidden path.

scripts/install.jsView on unpkg

127const targetRoot = resolveTargetRoot(); const dest = path.join(targetRoot, ".cursor"); if (path.resolve(source) === path.resolve(dest)) { console.log("[cursor-package-funtech] Skip install: already in package root"); return; } fs.cpSync(source, dest, { recursive: true, force: true }); console.log("[cursor-package-funtech] Installed .cursor →", dest); ensureRulesReviewScript(targetRoot); ensureGitignoreCursor(targetRoot); ensureHuskyPreCommit(targetRoot);

High

Ai Review Evidence

The installer forcibly copies its .cursor directory into the consuming project.

scripts/install.jsView on unpkg · L127