Loading npm security reports…

job-forge: AI-agent policy block | LPM Firewall

registry / job-forge / 2.14.49

job-forge@2.14.49

AI-powered job search pipeline built on opencode

AI Security Review

scanned 2h ago · by lpm-firewall-ai

LPM blocks this version under the AI-agent control-surface policy. npm postinstall mutates a consumer project's AI-agent configuration surface. It creates symlinks for multiple agent platforms and patches opencode.json so package instructions are loaded; configured MCP servers can subsequently start external tools.

Static reason

High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source

Trigger

npm installation of job-forge in a consumer project

Impact

A dependency installation changes broad consumer-agent behavior and registers MCP capabilities without an explicit setup command.

Mechanism

postinstall symlink and configuration injection into AI-agent control files

Policy narrative

On npm installation, package.json invokes bin/sync.mjs. That script creates missing consumer-project symlinks for Cursor, Claude Code, Codex, and OpenCode configuration/instruction files, patches an existing opencode.json to load package instructions, and runs migrations that alter package.json scripts. The installed agent configs register MCP servers, while the Geometra launcher can execute a package through npx when launched. Existing files are preserved, but the automatic cross-platform AI-agent control-surface mutation is unconsented and broad.

Rationale

Source inspection confirms concrete install-time mutation of foreign consumer AI-agent configuration surfaces, not merely scanner hints. This meets the blocking policy despite safeguards against overwriting existing files.

Evidence

package.jsonbin/sync.mjstemplates/migrations.json.mcp.json.codex/config.toml.cursor/mcp.jsonbin/geometra-mcp-launcher.mjs

Source & flagged code

11 flagged

package.jsonView file

Lines 115-155json

115 "receipts:verify": "node bin/job-forge.mjs receipts:verify",

116 "receipts:inspect": "node bin/job-forge.mjs receipts:inspect",

117 "receipts:redact": "node bin/job-forge.mjs receipts:redact",

118 "receipts:path": "node bin/job-forge.mjs receipts:path",

119 "migrate:plan": "node bin/job-forge.mjs migrate:plan",

120 "migrate:apply": "node bin/job-forge.mjs migrate:apply",

121 "migrate:check": "node bin/job-forge.mjs migrate:check",

122 "migrate:explain": "node bin/job-forge.mjs migrate:explain",

123 "plan": "iso plan .",

124 "lint:agentmd": "agentmd lint iso/instructions.md",

125 "lint:modes": "isolint lint modes/",

126 "lint:helpers": "node scripts/check-helper-integration.mjs .",

127 "test:agentmd": "agentmd test iso/instructions.md --fixtures fixtures/instructions.yml --via claude-code --model claude-haiku-4-5 --concurrency 2",

128 "test:agentmd:baseline": "agentmd test iso/instructions.md --fixtures fixtures/instructions.yml --via claude-code --model claude-haiku-4-5 --concurrency 2 --trials 3 --format json --out fixtures/baseline.json",

129 "test:agentmd:apply": "agentmd test modes/apply.md --fixtures fixtures/modes/apply.yml --via claude-code --model claude-haiku-4-5 --concurrency 2 --trials 3",

130 "lint:agentmd:modes": "agentmd lint modes/apply.md",

131 "smoke:iso": "iso plan . && iso build . --dry-run && iso-route verify models.yaml && node scripts/check-iso-smoke.mjs . && node scripts/check-helper-integration.mjs . && JOBFORGE_ROOT=$PWD iso-eval run fixtures/iso-smoke/eval.yml",

132 "build:config": "iso build .",

133 "prepack": "iso build .",

134 "release:check-source": "node ./scripts/release/check-source.mjs",

135 "postinstall": "node bin/sync.mjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L135

136 },

137 "files": [

138 "bin/",

139 "iso/",

140 "models.yaml",

141 ".claude/settings.json",

142 ".claude/iso-route.resolved.json",

143 ".claude/agents/",

144 ".cursor/mcp.json",

145 ".cursor/rules/",

146 ".cursor/iso-route.md",

147 ".opencode/",

148 ".codex/",

149 ".mcp.json",

150 "CLAUDE.md",

151 "AGENTS.md",

152 "opencode.json",

153 "modes/",

154 "templates/",

155 "config/profile.example.yml",

config/profile.example.ymlView file

Lines 33-73yaml

33 # Your professional headline (1 line)

34 headline: "ML Engineer turned AI product builder"

35 # Your exit story — what makes you unique

36 exit_story: "Built and sold my SaaS after 5 years. Now focused on applied AI at scale."

37 # Your top 3-5 superpowers

38 superpowers:

39 -

bin/create-job-forge.mjsView file

Lines 194-234javascript

194 'lineage:stale': 'job-forge lineage:stale',

195 'lineage:verify': 'job-forge lineage:verify',

196 'lineage:explain': 'job-forge lineage:explain',

197 'redact:scan': 'job-forge redact:scan',

198

scripts/receipts.mjsView file

Lines 397-437javascript

397 return `jobforge:${kind}`;

398}

399

400function defaultReceiptPath(kind, opts) {

401 const stamp =

bin/sync.mjsView file

Lines 1-21javascript

1#!/usr/bin/env node

2/**

Critical

Ai Agent Control Hijack

Install-time source drops package-supplied AI-agent/MCP control files or instructions.

bin/sync.mjsView on unpkg · L1

3 * sync.mjs — Create/refresh harness symlinks in the consumer's project.

4 *

5 * When job-forge is installed as an npm dependency, opencode / cursor /

6 * claude code / codex need to see certain files at the *consumer project

7 * root* (not inside node_modules). All of these are generated at publish

8 * time by iso-harness from the harness's iso/ source; this script mirrors

batch/batch-runner.shView file

•path = batch/batch-runner.sh kind = build_helper sizeBytes = 21665 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

batch/batch-runner.shView on unpkg

fonts/space-grotesk-latin.woff2View file

•path = fonts/space-grotesk-latin.woff2 kind = high_entropy_blob sizeBytes = 22320 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

fonts/space-grotesk-latin.woff2View on unpkg

bin/job-forge.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = job-forge@2.14.48 matchedIdentity = npm:am9iLWZvcmdl:2.14.48 similarity = 0.919 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bin/job-forge.mjsView on unpkg

modes/reference-portals.mdView file

Lines 48-88markdown

48- **Some Greenhouse tenants route OTP through third-party verification (Toast uses ClinchTalent).** If `from:greenhouse` returns empty after a Greenhouse submit, check the tenant-specific sender row above. Confirmed 2026-04-19: Toast Principal SWE #807 and Toast Senior FE #808.

50---

52## BYO Proxy + Block Detection

54**Problem:** Some portals return CAPTCHA, challenge, access-denied, unsupported-browser, rate-limit, or similar blocked states before a form can be read or submitted. `imeFriendly: true` fixes React validation lag, but it cannot change a server-side portal decision.

modes/_shared.mdView file

Lines 79-119markdown

79- **In Draft Answers (Section G):** Place the transition narrative in the first response.

80- **When the JD asks for "entrepreneurial", "ownership", "builder", "end-to-end":** This is the #1 differentiator. Increase match weight.

82### Use the cross-cutting advantage frame

84Frame the candidate as a **"Technical builder with real-world proof"**. Adapt the phrasing per archetype.

86- For PM: "builder who reduces uncertainty with prototypes then productionizes with discipline."

Source & flagged code

11 flagged · loading source

package.jsonView file

•scripts.postinstall = node bin/sync.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

config/profile.example.ymlView file

53patternName = generic_password severity = medium line = 53 matchedText = # pass...026"

Medium

Secret Pattern

Package contains a possible secret pattern.

config/profile.example.ymlView on unpkg · L53

124patternName = generic_password severity = medium line = 124 matchedText = # pass...auth

Medium

Secret Pattern

Hardcoded password in config/profile.example.yml

config/profile.example.ymlView on unpkg · L124

bin/create-job-forge.mjsView file

214// invoke them via npx without local package pins. L215: 'update-harness': 'npm update job-forge @razroo/gmail-mcp @geometra/mcp && job-forge sync && node -e "console.log(\'✅ harness at\', require(\'./package-lock.json\').packages[\'node... L216: },

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/create-job-forge.mjsView on unpkg · L214

scripts/receipts.mjsView file

417package = job-forge; repositoryIdentity = jobforge; dependency = @agent-pattern-labs/iso-receipts L417: try { L418: return await import('@agent-pattern-labs/iso-receipts'); L419: } catch {

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

scripts/receipts.mjsView on unpkg · L417

bin/sync.mjsView file

1Install-time AI-agent control hijack evidence: L22: L23: import { existsSync, lstatSync, readlinkSync, symlinkSync, mkdirSync, readFileSync, writeFileSync } from 'fs'; L24: import { dirname, join, resolve, relative } from 'path'; ... L71: // settings + iso-route resolved role map. L72: { src: '.mcp.json', dst: '.mcp.json' }, L73: { src: '.claude/agents', dst: '.claude/agents' }, L74: { src: '.claude/settings.json', dst: '.claude/settings.json' }, L75: { src: '.claude/iso-route.resolved.json', dst: '.claude/iso-route.resolved.json' }, L76: ... L78: // blocks (merged by iso-harness >=0.5.0 after iso-route writes first). L79: { src: '.codex/config.toml', dst: '.codex/config.toml' }, L80: Payload evidence from .mcp.json: L1: { L2: "mcpServers": {

Critical

Ai Agent Control Hijack

Install-time source drops package-supplied AI-agent/MCP control files or instructions.

bin/sync.mjsView on unpkg · L1

batch/batch-runner.shView file

•path = batch/batch-runner.sh kind = build_helper sizeBytes = 21665 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

batch/batch-runner.shView on unpkg

fonts/space-grotesk-latin.woff2View file

•path = fonts/space-grotesk-latin.woff2 kind = high_entropy_blob sizeBytes = 22320 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

fonts/space-grotesk-latin.woff2View on unpkg

bin/job-forge.mjsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bin/job-forge.mjsView on unpkg

modes/reference-portals.mdView file

68patternName = generic_password severity = medium line = 68 matchedText = password...onal

Medium

Secret Pattern

Hardcoded password in modes/reference-portals.md

modes/reference-portals.mdView on unpkg · L68

modes/_shared.mdView file

99patternName = generic_password severity = medium line = 99 matchedText = password...026"

Medium

Secret Pattern

Hardcoded password in modes/_shared.md

modes/_shared.mdView on unpkg · L99

Source & flagged code

11 flagged

package.jsonView file

Lines 115-155json

115 "receipts:verify": "node bin/job-forge.mjs receipts:verify",

116 "receipts:inspect": "node bin/job-forge.mjs receipts:inspect",

117 "receipts:redact": "node bin/job-forge.mjs receipts:redact",

118 "receipts:path": "node bin/job-forge.mjs receipts:path",

119 "migrate:plan": "node bin/job-forge.mjs migrate:plan",

120 "migrate:apply": "node bin/job-forge.mjs migrate:apply",

121 "migrate:check": "node bin/job-forge.mjs migrate:check",

122 "migrate:explain": "node bin/job-forge.mjs migrate:explain",

123 "plan": "iso plan .",

124 "lint:agentmd": "agentmd lint iso/instructions.md",

125 "lint:modes": "isolint lint modes/",

126 "lint:helpers": "node scripts/check-helper-integration.mjs .",

127 "test:agentmd": "agentmd test iso/instructions.md --fixtures fixtures/instructions.yml --via claude-code --model claude-haiku-4-5 --concurrency 2",

129 "test:agentmd:apply": "agentmd test modes/apply.md --fixtures fixtures/modes/apply.yml --via claude-code --model claude-haiku-4-5 --concurrency 2 --trials 3",

130 "lint:agentmd:modes": "agentmd lint modes/apply.md",

132 "build:config": "iso build .",

133 "prepack": "iso build .",

134 "release:check-source": "node ./scripts/release/check-source.mjs",

135 "postinstall": "node bin/sync.mjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L135

136 },

137 "files": [

138 "bin/",

139 "iso/",

140 "models.yaml",

141 ".claude/settings.json",

142 ".claude/iso-route.resolved.json",

143 ".claude/agents/",

144 ".cursor/mcp.json",

145 ".cursor/rules/",

146 ".cursor/iso-route.md",

147 ".opencode/",

148 ".codex/",

149 ".mcp.json",

150 "CLAUDE.md",

151 "AGENTS.md",

152 "opencode.json",

153 "modes/",

154 "templates/",

155 "config/profile.example.yml",

config/profile.example.ymlView file

Lines 33-73yaml

33 # Your professional headline (1 line)

34 headline: "ML Engineer turned AI product builder"

35 # Your exit story — what makes you unique

36 exit_story: "Built and sold my SaaS after 5 years. Now focused on applied AI at scale."

37 # Your top 3-5 superpowers

38 superpowers:

39 -

bin/create-job-forge.mjsView file

Lines 194-234javascript

194 'lineage:stale': 'job-forge lineage:stale',

195 'lineage:verify': 'job-forge lineage:verify',

196 'lineage:explain': 'job-forge lineage:explain',

197 'redact:scan': 'job-forge redact:scan',

198

scripts/receipts.mjsView file

Lines 397-437javascript

397 return `jobforge:${kind}`;

398}

399

400function defaultReceiptPath(kind, opts) {

401 const stamp =

bin/sync.mjsView file

Lines 1-21javascript

1#!/usr/bin/env node

2/**

Critical

Ai Agent Control Hijack

Install-time source drops package-supplied AI-agent/MCP control files or instructions.

bin/sync.mjsView on unpkg · L1

3 * sync.mjs — Create/refresh harness symlinks in the consumer's project.

4 *

5 * When job-forge is installed as an npm dependency, opencode / cursor /

6 * claude code / codex need to see certain files at the *consumer project

7 * root* (not inside node_modules). All of these are generated at publish

8 * time by iso-harness from the harness's iso/ source; this script mirrors

batch/batch-runner.shView file

•path = batch/batch-runner.sh kind = build_helper sizeBytes = 21665 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

batch/batch-runner.shView on unpkg

fonts/space-grotesk-latin.woff2View file

•path = fonts/space-grotesk-latin.woff2 kind = high_entropy_blob sizeBytes = 22320 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

fonts/space-grotesk-latin.woff2View on unpkg

bin/job-forge.mjsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bin/job-forge.mjsView on unpkg

modes/reference-portals.mdView file

Lines 48-88markdown

50---

52## BYO Proxy + Block Detection

modes/_shared.mdView file

Lines 79-119markdown

79- **In Draft Answers (Section G):** Place the transition narrative in the first response.

80- **When the JD asks for "entrepreneurial", "ownership", "builder", "end-to-end":** This is the #1 differentiator. Increase match weight.

82### Use the cross-cutting advantage frame

84Frame the candidate as a **"Technical builder with real-world proof"**. Adapt the phrasing per archetype.

86- For PM: "builder who reduces uncertainty with prototypes then productionizes with discipline."

job-forge@2.14.49

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code