registry / izanagi-ai / 2.0.6

izanagi-ai@2.0.6

Modular Skill-Oriented AI Prompt & Agent Framework for Autonomous Software Engineering

AI Security Review

scanned 2h ago · by lpm-firewall-ai

LPM blocks this version under the AI-agent control-surface policy. npm installation silently installs a large agent-instruction framework into the consuming project's generic .agents directory. This can overwrite existing agent-control files.

Static reason

One or more suspicious static signals were detected.; source fingerprint signature matched known malicious package; routed for review

Trigger

npm postinstall

Impact

Unconsented persistence and control of project AI-agent behavior.

Mechanism

recursive copy of AI-agent instructions into INIT_CWD/.agents

Policy narrative

Installing the package runs its postinstall hook. The hook loads the installer, which resolves the consumer project via INIT_CWD or cwd and recursively copies framework files into the generic .agents control surface, including AGENTS.md, SYSTEM.md, and RULES.md. Existing destination files are overwritten without an opt-in command or consent check.

Rationale

This is a concrete unconsented postinstall mutation of a broad AI-agent control surface. Absence of exfiltration does not remove the persistent prompt/control hijack risk.

Evidence

package.jsonbin/postinstall.cjsdist/postinstall.jsdist/installer.jsAGENTS.mdconsumer project/.agents/agentsconsumer project/.agents/skillsconsumer project/.agents/AGENTS.mdconsumer project/.agents/SYSTEM.mdconsumer project/.agents/RULES.md

izanagi-ai@2.0.6

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code