registry / job-forge / 2.14.50

job-forge@2.14.50

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. Installation configures a project-local AI-agent extension surface and can alter existing OpenCode instructions. Later agent/MCP use can launch configured third-party MCP commands.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

`npm install` runs `postinstall`; configured MCP commands run only when the consumer invokes the agent/MCP integration.

Impact

Can steer supported agent clients and enable MCP capabilities in the installed project; no confirmed stealth, exfiltration, or destructive behavior.

Mechanism

Project-local AI-agent config symlinks, instruction injection, and managed script migration.

Rationale

Source confirms an automatic project-local AI-agent configuration mutation, so a warning is appropriate. The mutations are package-aligned, conflict-preserving, and lack a concrete malicious chain; blocking is not supported.

Evidence

package.jsonbin/sync.mjs.mcp.json.codex/config.tomltemplates/migrations.jsonscripts/verify-greenhouse-urls.mjs.cursor/mcp.jsonopencode.json.opencode/instructions.md.agents/skills/job-forge

Decision evidence

public snapshot

AI called this Suspicious at 94.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

`package.json` runs `node bin/sync.mjs` in `postinstall`.
`bin/sync.mjs` symlinks package-supplied `.mcp.json`, `.cursor`, `.claude`, `.codex`, `.opencode`, and agent-skill files into the consumer project.
`bin/sync.mjs` also modifies an existing `opencode.json` instruction list and runs package-defined consumer migrations.
`.mcp.json` and `.codex/config.toml` configure MCP commands, including later `npx` execution of Geometra and Gmail MCP packages.

Evidence against

`bin/sync.mjs` scopes writes to `INIT_CWD`/the consumer project and leaves existing real files and conflicting symlinks unchanged.
The install hook performs local symlink/config/migration work; no install-time network or credential exfiltration is present in inspected source.
The only direct HTTP use found is explicit URL verification in `scripts/verify-greenhouse-urls.mjs`, not an install/import path.
Child-process use is primarily fixed CLI dispatch; no hidden payload, evaluator, or destructive command chain was found.

Behavioral surface

Source

ChildProcess

Source & flagged code

15 flagged

package.jsonView file

Lines 116-156json

116 "receipts:inspect": "node bin/job-forge.mjs receipts:inspect",

117 "receipts:redact": "node bin/job-forge.mjs receipts:redact",

118 "receipts:path": "node bin/job-forge.mjs receipts:path",

119 "migrate:plan": "node bin/job-forge.mjs migrate:plan",

120 "migrate:apply": "node bin/job-forge.mjs migrate:apply",

121 "migrate:check": "node bin/job-forge.mjs migrate:check",

122 "migrate:explain": "node bin/job-forge.mjs migrate:explain",

123 "plan": "iso plan .",

124 "lint:agentmd": "agentmd lint iso/instructions.md",

125 "lint:modes": "isolint lint modes/",

126 "lint:helpers": "node scripts/check-helper-integration.mjs .",

127 "test:agentmd": "agentmd test iso/instructions.md --fixtures fixtures/instructions.yml --via claude-code --model claude-haiku-4-5 --concurrency 2",

128 "test:agentmd:baseline": "agentmd test iso/instructions.md --fixtures fixtures/instructions.yml --via claude-code --model claude-haiku-4-5 --concurrency 2 --trials 3 --format json --out fixtures/baseline.json",

129 "test:agentmd:apply": "agentmd test modes/apply.md --fixtures fixtures/modes/apply.yml --via claude-code --model claude-haiku-4-5 --concurrency 2 --trials 3",

130 "lint:agentmd:modes": "agentmd lint modes/apply.md",

131 "smoke:iso": "iso plan . && iso build . --dry-run && node scripts/build-client-skills.mjs --dry-run && iso-route verify models.yaml && node scripts/check-iso-smoke.mjs . && node scripts/check-helper-integration.mjs . && JOBFORGE_ROOT=$PWD iso-eval run fixtures/iso-smoke/eval.yml",

132 "build:skills": "node scripts/build-client-skills.mjs",

133 "build:config": "iso build . && node scripts/build-client-skills.mjs",

134 "prepack": "npm run build:config",

135 "release:check-source": "node ./scripts/release/check-source.mjs",

136 "postinstall": "node bin/sync.mjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L136

137 },

138 "files": [

139 "bin/",

140 "iso/",

141 "models.yaml",

142 ".claude/settings.json",

143 ".claude/iso-route.resolved.json",

144 ".claude/agents/",

145 ".cursor/mcp.json",

146 ".cursor/rules/",

147 ".cursor/iso-route.md",

148 ".agents/",

149 ".opencode/",

150 ".codex/",

151 ".mcp.json",

152 "CLAUDE.md",

153 "AGENTS.md",

154 "opencode.json",

155 "modes/",

156 "templates/",

config/profile.example.ymlView file

Lines 33-73yaml

33 # Your professional headline (1 line)

34 headline: "ML Engineer turned AI product builder"

35 # Your exit story — what makes you unique

36 exit_story: "Built and sold my SaaS after 5 years. Now focused on applied AI at scale."

37 # Your top 3-5 superpowers

38 superpowers:

39 -

bin/create-job-forge.mjsView file

Lines 194-234javascript

194 'lineage:stale': 'job-forge lineage:stale',

195 'lineage:verify': 'job-forge lineage:verify',

196 'lineage:explain': 'job-forge lineage:explain',

197 'redact:scan': 'job-forge redact:scan',

198

scripts/receipts.mjsView file

Lines 397-437javascript

397 return `jobforge:${kind}`;

398}

399

400function defaultReceiptPath(kind, opts) {

401 const stamp =

bin/sync.mjsView file

Lines 1-21javascript

1#!/usr/bin/env node

2/**

Critical

Ai Agent Control Hijack

Install-time source drops package-supplied AI-agent/MCP control files or instructions.

bin/sync.mjsView on unpkg · L1

3 * sync.mjs — Create/refresh harness symlinks in the consumer's project.

4 *

5 * When job-forge is installed as an npm dependency, opencode / cursor /

6 * claude code / codex need to see certain files at the *consumer project

7 * root* (not inside node_modules). These are generated at publish time from

8 * the harness's iso/ source by iso-harness plus the client-skill adapter; this

batch/batch-runner.shView file

•path = batch/batch-runner.sh kind = build_helper sizeBytes = 21665 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

batch/batch-runner.shView on unpkg

fonts/space-grotesk-latin.woff2View file

•path = fonts/space-grotesk-latin.woff2 kind = high_entropy_blob sizeBytes = 22320 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

fonts/space-grotesk-latin.woff2View on unpkg

bin/geometra-mcp-launcher.mjsView file

•matchType = normalized_sha256 matchedPackage = job-forge@2.14.49 matchedPath = bin/geometra-mcp-launcher.mjs matchedIdentity = npm:am9iLWZvcmdl:2.14.49 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/geometra-mcp-launcher.mjsView on unpkg

bin/job-forge.mjsView file

•matchType = normalized_sha256 matchedPackage = job-forge@2.14.49 matchedPath = bin/job-forge.mjs matchedIdentity = npm:am9iLWZvcmdl:2.14.49 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/job-forge.mjsView on unpkg

merge-tracker.mjsView file

•matchType = normalized_sha256 matchedPackage = job-forge@2.14.49 matchedPath = merge-tracker.mjs matchedIdentity = npm:am9iLWZvcmdl:2.14.49 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

merge-tracker.mjsView on unpkg

scripts/batch-orchestrator.mjsView file

•matchType = normalized_sha256 matchedPackage = job-forge@2.14.49 matchedPath = scripts/batch-orchestrator.mjs matchedIdentity = npm:am9iLWZvcmdl:2.14.49 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/batch-orchestrator.mjsView on unpkg

modes/reference-portals.mdView file

Lines 48-88markdown

48- **Some Greenhouse tenants route OTP through third-party verification (Toast uses ClinchTalent).** If `from:greenhouse` returns empty after a Greenhouse submit, check the tenant-specific sender row above. Confirmed 2026-04-19: Toast Principal SWE #807 and Toast Senior FE #808.

50---

52## BYO Proxy + Block Detection

54**Problem:** Some portals return CAPTCHA, challenge, access-denied, unsupported-browser, rate-limit, or similar blocked states before a form can be read or submitted. `imeFriendly: true` fixes React validation lag, but it cannot change a server-side portal decision.

modes/_shared.mdView file

Lines 79-119markdown

79- **In Draft Answers (Section G):** Place the transition narrative in the first response.

80- **When the JD asks for "entrepreneurial", "ownership", "builder", "end-to-end":** This is the #1 differentiator. Increase match weight.

82### Use the cross-cutting advantage frame

84Frame the candidate as a **"Technical builder with real-world proof"**. Adapt the phrasing per archetype.

86- For PM: "builder who reduces uncertainty with prototypes then productionizes with discipline."

Source & flagged code

15 flagged · loading source

package.jsonView file

•scripts.postinstall = node bin/sync.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

config/profile.example.ymlView file

53patternName = generic_password severity = medium line = 53 matchedText = # pass...026"

Medium

Secret Pattern

Package contains a possible secret pattern.

config/profile.example.ymlView on unpkg · L53

124patternName = generic_password severity = medium line = 124 matchedText = # pass...auth

Medium

Secret Pattern

Hardcoded password in config/profile.example.yml

config/profile.example.ymlView on unpkg · L124

Findings

1 Critical8 High9 Medium5 Low

CriticalAi Agent Control Hijackbin/sync.mjs

HighInstall Time Lifecycle Scriptspackage.json

HighCopied Package Dependency Bridgescripts/receipts.mjs

HighShips High Entropy Blobfonts/space-grotesk-latin.woff2

HighKnown Malware Source Similaritybin/create-job-forge.mjs

HighKnown Malware Source Similaritybin/geometra-mcp-launcher.mjs

HighKnown Malware Source Similaritybin/job-forge.mjs

HighKnown Malware Source Similaritymerge-tracker.mjs

HighKnown Malware Source Similarityscripts/batch-orchestrator.mjs

MediumSecret Patternconfig/profile.example.yml

MediumDynamic Requirebin/create-job-forge.mjs