Loading npm security reports…

job-forge@2.14.48: AI-agent policy block | LPM Firewall

registry / job-forge / 2.14.48

job-forge@2.14.48

AI-powered job search pipeline built on opencode

AI Security Review

scanned 16d ago · by lpm-firewall-ai

LPM blocks this version under the AI-agent control-surface policy. Confirmed install-time mutation of AI-agent and MCP control surfaces in the consumer project. The package installs project-root agent configs and MCP wiring without a separate user command.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm install / postinstall lifecycle script

Impact

Can change how Codex/Cursor/Claude/OpenCode agents behave in the project and expose job-forge controlled MCP/tool instructions to future agent sessions.

Mechanism

postinstall symlink and config migration of AI-agent harness files

Policy narrative

On installation, postinstall runs bin/sync.mjs from inside node_modules. That script resolves the consumer project root, creates symlinks for multiple AI-agent configuration and instruction files, registers MCP servers such as geometra and gmail, patches opencode.json instructions, and applies migrations to consumer package.json/.gitignore. This is a concrete lifecycle-triggered AI-agent control-surface mutation.

Rationale

Although the behavior is documented as part of the harness and lacks obvious data exfiltration, it performs unconsented install-time writes to agent/MCP control files in the consumer project. Under the firewall boundary, that concrete lifecycle AI-agent control-surface mutation warrants blocking. Product guard normalized a non-low false-positive publish_block request to warn-only suspicious.

Evidence

package.jsonbin/sync.mjs.codex/config.toml.cursor/mcp.json.mcp.jsonopencode.json.opencode/agents/general-free.mdtemplates/migrations.json

Source & flagged code

10 flagged

package.jsonView file

Lines 111-151json

111 "receipts:verify": "node bin/job-forge.mjs receipts:verify",

112 "receipts:inspect": "node bin/job-forge.mjs receipts:inspect",

113 "receipts:redact": "node bin/job-forge.mjs receipts:redact",

114 "receipts:path": "node bin/job-forge.mjs receipts:path",

115 "migrate:plan": "node bin/job-forge.mjs migrate:plan",

116 "migrate:apply": "node bin/job-forge.mjs migrate:apply",

117 "migrate:check": "node bin/job-forge.mjs migrate:check",

118 "migrate:explain": "node bin/job-forge.mjs migrate:explain",

119 "plan": "iso plan .",

120 "lint:agentmd": "agentmd lint iso/instructions.md",

121 "lint:modes": "isolint lint modes/",

122 "lint:helpers": "node scripts/check-helper-integration.mjs .",

123 "test:agentmd": "agentmd test iso/instructions.md --fixtures fixtures/instructions.yml --via claude-code --model claude-haiku-4-5 --concurrency 2",

124 "test:agentmd:baseline": "agentmd test iso/instructions.md --fixtures fixtures/instructions.yml --via claude-code --model claude-haiku-4-5 --concurrency 2 --trials 3 --format json --out fixtures/baseline.json",

125 "test:agentmd:apply": "agentmd test modes/apply.md --fixtures fixtures/modes/apply.yml --via claude-code --model claude-haiku-4-5 --concurrency 2 --trials 3",

126 "lint:agentmd:modes": "agentmd lint modes/apply.md",

127 "smoke:iso": "iso plan . && iso build . --dry-run && iso-route verify models.yaml && node scripts/check-iso-smoke.mjs . && node scripts/check-helper-integration.mjs . && JOBFORGE_ROOT=$PWD iso-eval run fixtures/iso-smoke/eval.yml",

128 "build:config": "iso build .",

129 "prepack": "iso build .",

130 "release:check-source": "node ./scripts/release/check-source.mjs",

131 "postinstall": "node bin/sync.mjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L131

132 },

133 "files": [

134 "bin/",

135 "iso/",

136 "models.yaml",

137 ".claude/settings.json",

138 ".claude/iso-route.resolved.json",

139 ".claude/agents/",

140 ".cursor/mcp.json",

141 ".cursor/rules/",

142 ".cursor/iso-route.md",

143 ".opencode/",

144 ".codex/",

145 ".mcp.json",

146 "CLAUDE.md",

147 "AGENTS.md",

148 "opencode.json",

149 "modes/",

150 "templates/",

151 "config/profile.example.yml",

config/profile.example.ymlView file

Lines 33-73yaml

33 # Your professional headline (1 line)

34 headline: "ML Engineer turned AI product builder"

35 # Your exit story — what makes you unique

36 exit_story: "Built and sold my SaaS after 5 years. Now focused on applied AI at scale."

37 # Your top 3-5 superpowers

38 superpowers:

39 -

bin/create-job-forge.mjsView file

Lines 194-234javascript

194 'lineage:stale': 'job-forge lineage:stale',

195 'lineage:verify': 'job-forge lineage:verify',

196 'lineage:explain': 'job-forge lineage:explain',

197 'redact:scan': 'job-forge redact:scan',

198

scripts/receipts.mjsView file

Lines 397-437javascript

397 return `jobforge:${kind}`;

398}

399

400function defaultReceiptPath(kind, opts) {

401 const stamp =

bin/sync.mjsView file

Lines 1-21javascript

1#!/usr/bin/env node

2/**

Critical

Ai Agent Control Hijack

Install-time source drops package-supplied AI-agent/MCP control files or instructions.

bin/sync.mjsView on unpkg · L1

3 * sync.mjs — Create/refresh harness symlinks in the consumer's project.

4 *

5 * When job-forge is installed as an npm dependency, opencode / cursor /

6 * claude code / codex need to see certain files at the *consumer project

7 * root* (not inside node_modules). All of these are generated at publish

8 * time by iso-harness from the harness's iso/ source; this script mirrors

batch/batch-runner.shView file

•path = batch/batch-runner.sh kind = build_helper sizeBytes = 21665 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

batch/batch-runner.shView on unpkg

fonts/space-grotesk-latin.woff2View file

•path = fonts/space-grotesk-latin.woff2 kind = high_entropy_blob sizeBytes = 22320 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

fonts/space-grotesk-latin.woff2View on unpkg

modes/reference-portals.mdView file

Lines 48-88markdown

48- **Some Greenhouse tenants route OTP through third-party verification (Toast uses ClinchTalent).** If `from:greenhouse` returns empty after a Greenhouse submit, check the tenant-specific sender row above. Confirmed 2026-04-19: Toast Principal SWE #807 and Toast Senior FE #808.

50---

52## BYO Proxy + Block Detection

54**Problem:** Some portals return CAPTCHA, challenge, access-denied, unsupported-browser, rate-limit, or similar blocked states before a form can be read or submitted. `imeFriendly: true` fixes React validation lag, but it cannot change a server-side portal decision.

modes/_shared.mdView file

Lines 79-119markdown

79- **In Draft Answers (Section G):** Place the transition narrative in the first response.

80- **When the JD asks for "entrepreneurial", "ownership", "builder", "end-to-end":** This is the #1 differentiator. Increase match weight.

82### Use the cross-cutting advantage frame

84Frame the candidate as a **"Technical builder with real-world proof"**. Adapt the phrasing per archetype.

86- For PM: "builder who reduces uncertainty with prototypes then productionizes with discipline."

Source & flagged code

10 flagged · loading source

package.jsonView file

•scripts.postinstall = node bin/sync.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

config/profile.example.ymlView file

53patternName = generic_password severity = medium line = 53 matchedText = # pass...026"

Medium

Secret Pattern

Package contains a possible secret pattern.

config/profile.example.ymlView on unpkg · L53

113patternName = generic_password severity = medium line = 113 matchedText = # pass...auth

Medium

Secret Pattern

Hardcoded password in config/profile.example.yml

config/profile.example.ymlView on unpkg · L113

bin/create-job-forge.mjsView file

214// invoke them via npx without local package pins. L215: 'update-harness': 'npm update job-forge @razroo/gmail-mcp @geometra/mcp && job-forge sync && node -e "console.log(\'✅ harness at\', require(\'./package-lock.json\').packages[\'node... L216: },

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/create-job-forge.mjsView on unpkg · L214

scripts/receipts.mjsView file

417package = job-forge; repositoryIdentity = jobforge; dependency = @agent-pattern-labs/iso-receipts L417: try { L418: return await import('@agent-pattern-labs/iso-receipts'); L419: } catch {

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

scripts/receipts.mjsView on unpkg · L417

bin/sync.mjsView file

1Install-time AI-agent control hijack evidence: L22: L23: import { existsSync, lstatSync, readlinkSync, symlinkSync, mkdirSync, readFileSync, writeFileSync } from 'fs'; L24: import { dirname, join, resolve, relative } from 'path'; ... L71: // settings + iso-route resolved role map. L72: { src: '.mcp.json', dst: '.mcp.json' }, L73: { src: '.claude/agents', dst: '.claude/agents' }, L74: { src: '.claude/settings.json', dst: '.claude/settings.json' }, L75: { src: '.claude/iso-route.resolved.json', dst: '.claude/iso-route.resolved.json' }, L76: ... L78: // blocks (merged by iso-harness >=0.5.0 after iso-route writes first). L79: { src: '.codex/config.toml', dst: '.codex/config.toml' }, L80: Payload evidence from .mcp.json: L1: { L2: "mcpServers": {

Critical

Ai Agent Control Hijack

Install-time source drops package-supplied AI-agent/MCP control files or instructions.

bin/sync.mjsView on unpkg · L1

batch/batch-runner.shView file

•path = batch/batch-runner.sh kind = build_helper sizeBytes = 21665 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

batch/batch-runner.shView on unpkg

fonts/space-grotesk-latin.woff2View file

•path = fonts/space-grotesk-latin.woff2 kind = high_entropy_blob sizeBytes = 22320 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

fonts/space-grotesk-latin.woff2View on unpkg

modes/reference-portals.mdView file

68patternName = generic_password severity = medium line = 68 matchedText = password...onal

Medium

Secret Pattern

Hardcoded password in modes/reference-portals.md

modes/reference-portals.mdView on unpkg · L68

modes/_shared.mdView file

99patternName = generic_password severity = medium line = 99 matchedText = password...026"

Medium

Secret Pattern

Hardcoded password in modes/_shared.md

modes/_shared.mdView on unpkg · L99

Source & flagged code

10 flagged

package.jsonView file

Lines 111-151json

111 "receipts:verify": "node bin/job-forge.mjs receipts:verify",

112 "receipts:inspect": "node bin/job-forge.mjs receipts:inspect",

113 "receipts:redact": "node bin/job-forge.mjs receipts:redact",

114 "receipts:path": "node bin/job-forge.mjs receipts:path",

115 "migrate:plan": "node bin/job-forge.mjs migrate:plan",

116 "migrate:apply": "node bin/job-forge.mjs migrate:apply",

117 "migrate:check": "node bin/job-forge.mjs migrate:check",

118 "migrate:explain": "node bin/job-forge.mjs migrate:explain",

119 "plan": "iso plan .",

120 "lint:agentmd": "agentmd lint iso/instructions.md",

121 "lint:modes": "isolint lint modes/",

122 "lint:helpers": "node scripts/check-helper-integration.mjs .",

123 "test:agentmd": "agentmd test iso/instructions.md --fixtures fixtures/instructions.yml --via claude-code --model claude-haiku-4-5 --concurrency 2",

125 "test:agentmd:apply": "agentmd test modes/apply.md --fixtures fixtures/modes/apply.yml --via claude-code --model claude-haiku-4-5 --concurrency 2 --trials 3",

126 "lint:agentmd:modes": "agentmd lint modes/apply.md",

128 "build:config": "iso build .",

129 "prepack": "iso build .",

130 "release:check-source": "node ./scripts/release/check-source.mjs",

131 "postinstall": "node bin/sync.mjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L131

132 },

133 "files": [

134 "bin/",

135 "iso/",

136 "models.yaml",

137 ".claude/settings.json",

138 ".claude/iso-route.resolved.json",

139 ".claude/agents/",

140 ".cursor/mcp.json",

141 ".cursor/rules/",

142 ".cursor/iso-route.md",

143 ".opencode/",

144 ".codex/",

145 ".mcp.json",

146 "CLAUDE.md",

147 "AGENTS.md",

148 "opencode.json",

149 "modes/",

150 "templates/",

151 "config/profile.example.yml",

config/profile.example.ymlView file

Lines 33-73yaml

33 # Your professional headline (1 line)

34 headline: "ML Engineer turned AI product builder"

35 # Your exit story — what makes you unique

36 exit_story: "Built and sold my SaaS after 5 years. Now focused on applied AI at scale."

37 # Your top 3-5 superpowers

38 superpowers:

39 -

bin/create-job-forge.mjsView file

Lines 194-234javascript

194 'lineage:stale': 'job-forge lineage:stale',

195 'lineage:verify': 'job-forge lineage:verify',

196 'lineage:explain': 'job-forge lineage:explain',

197 'redact:scan': 'job-forge redact:scan',

198

scripts/receipts.mjsView file

Lines 397-437javascript

397 return `jobforge:${kind}`;

398}

399

400function defaultReceiptPath(kind, opts) {

401 const stamp =

bin/sync.mjsView file

Lines 1-21javascript

1#!/usr/bin/env node

2/**

Critical

Ai Agent Control Hijack

Install-time source drops package-supplied AI-agent/MCP control files or instructions.

bin/sync.mjsView on unpkg · L1

3 * sync.mjs — Create/refresh harness symlinks in the consumer's project.

4 *

5 * When job-forge is installed as an npm dependency, opencode / cursor /

6 * claude code / codex need to see certain files at the *consumer project

7 * root* (not inside node_modules). All of these are generated at publish

8 * time by iso-harness from the harness's iso/ source; this script mirrors

batch/batch-runner.shView file

•path = batch/batch-runner.sh kind = build_helper sizeBytes = 21665 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

batch/batch-runner.shView on unpkg

fonts/space-grotesk-latin.woff2View file

•path = fonts/space-grotesk-latin.woff2 kind = high_entropy_blob sizeBytes = 22320 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

fonts/space-grotesk-latin.woff2View on unpkg

modes/reference-portals.mdView file

Lines 48-88markdown

50---

52## BYO Proxy + Block Detection

modes/_shared.mdView file

Lines 79-119markdown

79- **In Draft Answers (Section G):** Place the transition narrative in the first response.

80- **When the JD asks for "entrepreneurial", "ownership", "builder", "end-to-end":** This is the #1 differentiator. Increase match weight.

82### Use the cross-cutting advantage frame

84Frame the candidate as a **"Technical builder with real-world proof"**. Adapt the phrasing per archetype.

86- For PM: "builder who reduces uncertainty with prototypes then productionizes with discipline."

job-forge@2.14.48

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Behavioral surface

Source & flagged code