Loading npm security reports…

hi-aiot-skills@1.2.0: AI-agent policy block | LPM Firewall

registry / hi-aiot-skills / 1.2.0

hi-aiot-skills@1.2.0

Hi-AIoT Agent Skills 集合 — HiSilicon Hi3516CV610/CV608 嵌入式平台开发工具集

AI Security Review

scanned 19d ago · by lpm-firewall-ai

LPM blocks this version under the AI-agent control-surface policy. Confirmed install-time mutation of an AI-agent control surface: npm postinstall stages bundled .agents skills into the user's home config. No exfiltration or destructive behavior was found in the inspected entrypoints.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

npm install of hi-aiot-skills@1.2.0

Impact

Unconsented installation of agent skill instructions/scripts into a user-level AI-agent staging area

Mechanism

postinstall copies bundled AI-agent skills into ~/.config/hi-aiot-cli/.agents

Policy narrative

On npm install, package.json runs src/postinstall.js, which calls setup() and copies raw/.agents into ~/.config/hi-aiot-cli/.agents. That writes AI-agent skill content and helper scripts into a user-level control surface before the user invokes the CLI. Later CLI commands can install those staged skills into project or tool-specific .agents directories; remote GitCode cloning is only user-invoked.

Rationale

The package does not show credential theft, exfiltration, persistence, or destructive behavior, and scanner blob findings are package-aligned skill assets. However, the npm lifecycle hook performs unconsented AI-agent control-surface mutation by staging bundled .agents skills at install time, which is a blocking policy violation. Product guard normalized a concrete AI-agent control hijack publish_block to the blockable dangerous-capability shape.

Evidence

package.jsonsrc/postinstall.jssrc/install.jscli.jssrc/remotes/gitcode.jsraw/.agents/skills/origin/hi3516cv610-burn-local/scripts/setup_pc_local.bat

Source & flagged code

9 flagged · loading source

package.jsonView file

•scripts.postinstall = node src/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node src/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

cli.jsView file

4L5: var fs = require('fs'); L6: var path = require('path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

cli.jsView on unpkg · L4

raw/.agents/skills/origin/hi3516cv610-burn-local/scripts/setup_pc_local.batView file

•path = raw/.[redacted]-burn-local/scripts/setup_pc_local.bat kind = payload_in_excluded_dir sizeBytes = 5198 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

raw/.agents/skills/origin/hi3516cv610-burn-local/scripts/setup_pc_local.batView on unpkg

•path = raw/.[redacted]-burn-local/scripts/setup_pc_local.bat kind = build_helper sizeBytes = 5198 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

raw/.agents/skills/origin/hi3516cv610-burn-local/scripts/setup_pc_local.batView on unpkg

raw/.agents/skills/origin/spi-panel-bringup/assets/Hi3516CV610_PINOUT_CN.xlsxView file

•path = raw/.agents/skills/origin/spi-panel-bringup/assets/Hi3516CV610_PINOUT_CN.xlsx kind = high_entropy_blob sizeBytes = 212854 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

raw/.agents/skills/origin/spi-panel-bringup/assets/Hi3516CV610_PINOUT_CN.xlsxView on unpkg

•path = raw/.agents/skills/origin/spi-panel-bringup/assets/Hi3516CV610_PINOUT_CN.xlsx kind = compressed_blob sizeBytes = 212854 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

raw/.agents/skills/origin/spi-panel-bringup/assets/Hi3516CV610_PINOUT_CN.xlsxView on unpkg

•path = raw/.agents/skills/origin/spi-panel-bringup/assets/Hi3516CV610_PINOUT_CN.xlsx kind = nested_archive_needs_inspection sizeBytes = 212854 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

raw/.agents/skills/origin/spi-panel-bringup/assets/Hi3516CV610_PINOUT_CN.xlsx

src/remotes/gitcode.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = hi-aiot-skills@1.0.0 matchedIdentity = npm:aGktYWlvdC1za2lsbHM:1.0.0 similarity = 0.400 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version.

src/remotes/gitcode.jsView on unpkg

Source & flagged code

9 flagged

package.jsonView file

Lines 1-28json

1{

2 "name": "hi-aiot-skills",

3 "version": "1.2.0",

4 "description": "Hi-AIoT Agent Skills 集合 — HiSilicon Hi3516CV610/CV608 嵌入式平台开发工具集",

5 "bin": {

6 "hi-aiot-cli": "cli.js"

7 },

8 "files": [

9 "cli.js",

10 "src/",

11 "src/remotes/",

12 "raw/",

13 "README.md"

14 ],

15 "scripts": {

16 "postinstall": "node src/postinstall.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L16

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L16

17 },

18 "keywords": [

19 "hisilicon",

20 "hi3516",

21 "embedded",

22 "agent-skills",

23 "claude-code",

24 "ai-tools"

25 ],

26 "license": "MIT"

27}

28

cli.jsView file

Lines 1-24javascript

1#!/usr/bin/env node

2// hi-aiot-cli — Agent Skills 安装工具

3// CLI 入口：解析 setup / install skill / start / list 子命令及参数

4

5var fs = require('fs');

6var path = require('path');

Medium

Dynamic Require

raw/.agents/skills/origin/hi3516cv610-burn-local/scripts/setup_pc_local.batView file

•path = raw/.[redacted]-burn-local/scripts/setup_pc_local.bat kind = payload_in_excluded_dir sizeBytes = 5198 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

raw/.agents/skills/origin/hi3516cv610-burn-local/scripts/setup_pc_local.batView on unpkg

•path = raw/.[redacted]-burn-local/scripts/setup_pc_local.bat kind = build_helper sizeBytes = 5198 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

raw/.agents/skills/origin/hi3516cv610-burn-local/scripts/setup_pc_local.batView on unpkg

raw/.agents/skills/origin/spi-panel-bringup/assets/Hi3516CV610_PINOUT_CN.xlsxView file

•path = raw/.agents/skills/origin/spi-panel-bringup/assets/Hi3516CV610_PINOUT_CN.xlsx kind = high_entropy_blob sizeBytes = 212854 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

raw/.agents/skills/origin/spi-panel-bringup/assets/Hi3516CV610_PINOUT_CN.xlsxView on unpkg

•path = raw/.agents/skills/origin/spi-panel-bringup/assets/Hi3516CV610_PINOUT_CN.xlsx kind = compressed_blob sizeBytes = 212854 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

raw/.agents/skills/origin/spi-panel-bringup/assets/Hi3516CV610_PINOUT_CN.xlsxView on unpkg

•path = raw/.agents/skills/origin/spi-panel-bringup/assets/Hi3516CV610_PINOUT_CN.xlsx kind = nested_archive_needs_inspection sizeBytes = 212854 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

raw/.agents/skills/origin/spi-panel-bringup/assets/Hi3516CV610_PINOUT_CN.xlsx

src/remotes/gitcode.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = hi-aiot-skills@1.0.0 matchedIdentity = npm:aGktYWlvdC1za2lsbHM:1.0.0 similarity = 0.400 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version.

src/remotes/gitcode.jsView on unpkg