registry / hscrape / 0.2.10

hscrape@0.2.10

Evo Headless Scraper CLI. Installs the `hscrape` binary for your platform plus the evo-scraper skill for Claude Code.

AI Security Review

scanned 3h ago · by lpm-firewall-ai

LPM blocks this version under the AI-agent control-surface policy. Installation mutates the user's Claude Code global skill directory without a separate user command or consent gate. It replaces the package-named skill directory with bundled agent instructions.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

`npm install hscrape@0.2.10` runs the postinstall hook; invoking `hscrape` retries it.

Impact

Package-supplied instructions become automatically discoverable by Claude Code and can affect future agent behavior.

Mechanism

Postinstall recursive replacement of a foreign AI-agent skill directory.

Policy narrative

On installation, the postinstall hook deletes `~/.claude/skills/evo-scraper`, copies the package's bundled skill into that global Claude Code directory, and writes a version stamp. The same mutation runs again when the CLI starts. This is unconsented install-time modification of a foreign AI-agent control surface.

Rationale

The package has no confirmed exfiltration chain, but its install hook automatically replaces a globally discovered Claude Code skill. Under the firewall policy, this concrete postinstall AI-agent control-surface mutation requires a block.

Evidence

package.jsonlib/install-skill.jshscrape.jsskill/SKILL.mdskill/~/.claude/skills/evo-scraper~/.claude/skills/evo-scraper/.hscrape-version

hscrape@0.2.10

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code