dsh-plugin-prompt-tool@0.4.1: Suspicious npm security report | LPM Firewall

Loading npm security reports…

dsh-plugin-prompt-tool@0.4.1: Suspicious npm security report | LPM Firewall

Source & flagged code

6 flagged · loading source

lib/index.mjsView file

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. initialization complete — exiting so the repaired profile can be launched"); settimeout(() => process.exit(0), auto_exit_delay_ms); } }

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

lib/index.mjsView on unpkg

121manifest.dependencies = { ...manifest.dependencies, [PLUGIN_BUNDLE]: pluginSpec }; added.push(`dependency ${PLUGIN_BUNDLE}=${pluginSpec}`); } if (!bundles.includes(PLUGIN_BUNDLE)) { bundles.push(PLUGIN_BUNDLE); added.push(`bundle ${PLUGIN_BUNDLE}`); } if (added.length === 0) return void 0; if (!writeManifest(packagePath, manifest, warn)) return void 0;

Medium

Ai Review Evidence

运行时自动修改相邻 DSH profile 的依赖与 bundle。

lib/index.mjsView on unpkg · L121

244const AGENTS_URL = new URL("../AGENTS.md", import.meta.url); const AGENTS_FILE_PATH = fileURLToPath(AGENTS_URL); const NS = settingsNamespace("prompt-tool"); const DSH_HOME = process.env.DSH_HOME ?? join(homedir(), ".dsh"); const DEFAULT_RESIDENT_AGENTS_PATH = join(DSH_HOME, "AGENTS.md"); const DEFAULT_PRESET_DIR = join(DSH_HOME, ".agent-presets", "prompt-tool");

Medium

Ai Review Evidence

默认配置将规则写入 $DSH_HOME/AGENTS.md。

lib/index.mjsView on unpkg · L244

1078let residentAgentsWritten = false; if (runtime.writeAgents) { residentAgentsWritten = writeAgents(currentAgents, config.residentAgentsPath); if (!residentAgentsWritten) warn(ctx, `prompt-tool: failed to write resident rules to ${config.residentAgentsPath}`); } else { residentAgentsWritten = removeResidentAgentsBlock(config.residentAgentsPath);

Medium

Ai Review Evidence

默认配置将规则写入 $DSH_HOME/AGENTS.md。

lib/index.mjsView on unpkg · L1078

895const meta = readFileSync(PRESET_TEMPLATE_META, "utf8").replace(/^order:.*$/m, `order: ${options.presetOrder}`); writeFileSync(join(presetDir, "preset.yml"), meta, "utf8"); for (const file of LOCAL_PRESET_SCRIPTS) writeFileSync(join(presetDir, file), readFileSync(join(LOCAL_PRESET_DIR, file), "utf8"), "utf8"); rmSync(join(presetDir, "dev-tool-search.mjs"), { force: true }); const agentsInstructionPath = join(presetDir, "agents-instruction.txt"); if (options.agentsInstructionText !== void 0) writeFileSync(agentsInstructionPath, options.agentsInstructionText, "utf8"); else rmSync(agentsIn

Medium

Ai Review Evidence

运行时生成预设并投放可执行的 custom-bash 脚本。

lib/index.mjsView on unpkg · L895

preset/custom-bash.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = dsh-plugin-prompt-tool@0.3.1 matchedIdentity = npm:ZHNoLXBsdWdpbi1wcm9tcHQtdG9vbA:0.3.1 similarity = 0.643 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

preset/custom-bash.mjsView on unpkg

Source & flagged code

6 flagged

lib/index.mjsView file

Lines 101-141javascript

101 bundles.splice(insertAt, 0, WEB_APP_BUNDLE);

102 return "added";

103}

104/**

105* 把本插件补进同级 profile 的 dependencies + bundles。

106* @returns 实际写入的条目描述；返回 undefined 表示跳过/失败。

107*/

108function ensurePluginInSiblingProfile(packagePath, manifest, pluginSpec, warn) {

109 const bundles = manifest.dsh?.profile?.bundles;

110 if (!Array.isArray(bundles)) {

111 warn(`prompt-tool: sibling profile manifest has no dsh.profile.bundles: ${packagePath}`);

112 return;

113 }

114 const hasDependency = manifest.dependencies?.[PLUGIN_BUNDLE] !== void 0;

115 const added = [];

116 if (!hasDependency) {

117 if (typeof pluginSpec !== "string" || pluginSpec.length === 0) {

118 warn(`prompt-tool: skip sibling profile ${packagePath} — current profile declares no install spec for ${PLUGIN_BUNDLE}`);

119 return;

120 }

121 manifest.dependencies = {

122 ...manifest.dependencies,

123 [PLUGIN_BUNDLE]: pluginSpec

124 };

125 added.push(`dependency ${PLUGIN_BUNDLE}=${pluginSpec}`);

126 }

127 if (!bundles.includes(PLUGIN_BUNDLE)) {

128 bundles.push(PLUGIN_BUNDLE);

129 added.push(`bundle ${PLUGIN_BUNDLE}`);

130 }

131 if (added.length === 0) return void 0;

132 if (!writeManifest(packagePath, manifest, warn)) return void 0;

Medium

Ai Review Evidence

运行时自动修改相邻 DSH profile 的依赖与 bundle。

lib/index.mjsView on unpkg · L121

133 return added.join(", ");

134}

135/** 自愈同级 web / dsh-tui profile；只写 package.json，不创建 node_modules 链接。 */

136function healSiblingProfiles(profileDir, pluginSpec, warn) {

137 const profilesDir = join(profileDir, "..");

138 for (const profileName of SIBLING_PROFILES) {

139 const packagePath = join(profilesDir, profileName, "package.json");

140 if (!existsSync(packagePath)) {

141 warn(`prompt-tool: skip sibling heal for "${profileName}" — profile package.json not found`);

Lines 224-264javascript

224 if (!existsSync(sourceDir)) return targetDir;

225 mergeMissing(sourceDir, targetDir);

226 return targetDir;

227 } catch (error) {

228 warn(`prompt-tool: failed to copy skills into profile directory ${targetDir}: ${error instanceof

Lines 875-915javascript

875 if (service.start === wrapped) service.start = original;

876 };

877 });

878}

879function writePreset(prompt, options) {

880 const presetDir = options.presetDir;

Lines 1058-1098javascript

1058 if (agentsChanged) currentAgents = next.agentsText;

1059 runtime.writeAgents = nextRuntime.writeAgents;

1060 runtime.writePreset = nextRuntime.writePreset;

1061 runtime.injectAgentsPrompt = nextRuntime.injectAgentsPrompt;

1062 runtime.injectPrompt = nextRuntime.injectPrompt;

1063 runtime.skillSwitches = nextRuntime.skillSwitches;

1064 runtime.skillsDir

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. initialization complete — exiting so the repaired profile can be launched"); settimeout(() => process.exit(0), auto_exit_delay_ms); } }

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

lib/index.mjsView on unpkg

preset/custom-bash.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = dsh-plugin-prompt-tool@0.3.1 matchedIdentity = npm:ZHNoLXBsdWdpbi1wcm9tcHQtdG9vbA:0.3.1 similarity = 0.643 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

preset/custom-bash.mjsView on unpkg