registry / job-forge / 2.14.54

job-forge@2.14.54

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. Install-time setup creates project-local AI-agent and MCP configuration, and may patch opencode.json. This is a material agent-extension lifecycle surface, but no concrete malicious payload or exfiltration chain was found.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

npm postinstall of job-forge

Impact

A consumer project can automatically gain JobForge, browser, and Gmail MCP integrations when opened by supported AI clients.

Mechanism

project-local symlinked agent/MCP configuration and OpenCode instruction mutation

Rationale

Source supports a first-party, project-scoped agent-extension lifecycle risk, not malware. No concrete stealth, theft, exfiltration, destructive behavior, or remote payload execution was established.

Evidence

package.jsonbin/sync.mjsbin/geometra-mcp-launcher.mjs.mcp.json.codex/config.tomlopencode.json.cursor/mcp.json.agents/skills/job-forge

Decision evidence

public snapshot

AI called this Suspicious at 93.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

package.json runs bin/sync.mjs automatically via postinstall.
bin/sync.mjs symlinks MCP/agent configuration into the consumer project.
bin/sync.mjs modifies an existing consumer opencode.json.
Installed configs register Geometra and Gmail MCP commands, including npx -y @razroo/gmail-mcp.
bin/geometra-mcp-launcher.mjs can launch an npm MCP package at runtime.

Evidence against

sync.mjs preserves existing real files and unrelated symlinks rather than overwriting them.
The lifecycle behavior is documented as JobForge harness setup and targets project-local paths.
No source-confirmed credential harvesting, exfiltration, destructive action, obfuscated payload, or covert network endpoint was found.
Child-process launches are package CLI/MCP dispatchers or explicit job-search browser tooling.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Source & flagged code

15 flagged

package.jsonView file

Lines 117-157json

117 "receipts:redact": "node bin/job-forge.mjs receipts:redact",

118 "receipts:path": "node bin/job-forge.mjs receipts:path",

119 "apply:queue": "node scripts/apply-queue.mjs",

120 "migrate:plan": "node bin/job-forge.mjs migrate:plan",

121 "migrate:apply": "node bin/job-forge.mjs migrate:apply",

122 "migrate:check": "node bin/job-forge.mjs migrate:check",

123 "migrate:explain": "node bin/job-forge.mjs migrate:explain",

124 "plan": "iso plan .",

125 "lint:agentmd": "agentmd lint iso/instructions.md",

126 "lint:modes": "isolint lint modes/",

127 "lint:helpers": "node scripts/check-helper-integration.mjs .",

128 "test:agentmd": "agentmd test iso/instructions.md --fixtures fixtures/instructions.yml --via claude-code --model claude-haiku-4-5 --concurrency 2",

129 "test:agentmd:baseline": "agentmd test iso/instructions.md --fixtures fixtures/instructions.yml --via claude-code --model claude-haiku-4-5 --concurrency 2 --trials 3 --format json --out fixtures/baseline.json",

130 "test:agentmd:apply": "agentmd test modes/apply.md --fixtures fixtures/modes/apply.yml --via claude-code --model claude-haiku-4-5 --concurrency 2 --trials 3",

131 "lint:agentmd:modes": "agentmd lint modes/apply.md",

132 "smoke:iso": "iso plan . && iso build . --dry-run && node scripts/build-client-skills.mjs --dry-run && iso-route verify models.yaml && node scripts/check-iso-smoke.mjs . && node scripts/check-helper-integration.mjs . && JOBFORGE_ROOT=$PWD iso-eval run fixtures/iso-smoke/eval.yml",

133 "build:skills": "node scripts/build-client-skills.mjs",

134 "build:config": "iso build . && node scripts/build-client-skills.mjs",

135 "prepack": "npm run build:config",

136 "release:check-source": "node ./scripts/release/check-source.mjs",

137 "postinstall": "node bin/sync.mjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L137

138 },

139 "files": [

140 "bin/",

141 "iso/",

142 "models.yaml",

143 ".claude/settings.json",

144 ".claude/iso-route.resolved.json",

145 ".claude/agents/",

146 ".cursor/mcp.json",

147 ".cursor/rules/",

148 ".cursor/iso-route.md",

149 ".agents/",

150 ".opencode/",

151 ".codex/",

152 ".mcp.json",

153 "CLAUDE.md",

154 "AGENTS.md",

155 "opencode.json",

156 "modes/",

157 "templates/",

config/profile.example.ymlView file

Lines 33-73yaml

33 # Your professional headline (1 line)

34 headline: "ML Engineer turned AI product builder"

35 # Your exit story — what makes you unique

36 exit_story: "Built and sold my SaaS after 5 years. Now focused on applied AI at scale."

37 # Your top 3-5 superpowers

38 superpowers:

39 -

bin/create-job-forge.mjsView file

Lines 195-235javascript

195 'lineage:stale': 'job-forge lineage:stale',

196 'lineage:verify': 'job-forge lineage:verify',

197 'lineage:explain': 'job-forge lineage:explain',

198 'redact:scan': 'job-forge redact:scan',

199

scripts/receipts.mjsView file

Lines 397-437javascript

397 return `jobforge:${kind}`;

398}

399

400function defaultReceiptPath(kind, opts) {

401 const stamp =

bin/sync.mjsView file

Lines 1-21javascript

1#!/usr/bin/env node

2/**

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

bin/sync.mjsView on unpkg · L1

3 * sync.mjs — Create/refresh harness symlinks in the consumer's project.

4 *

5 * When job-forge is installed as an npm dependency, opencode / cursor /

6 * claude code / codex need to see certain files at the *consumer project

7 * root* (not inside node_modules). These are generated at publish time from

8 * the harness's iso/ source by iso-harness plus the client-skill adapter; this

batch/batch-runner.shView file

•path = batch/batch-runner.sh kind = build_helper sizeBytes = 21665 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

batch/batch-runner.shView on unpkg

fonts/space-grotesk-latin.woff2View file

•path = fonts/space-grotesk-latin.woff2 kind = high_entropy_blob sizeBytes = 22320 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

fonts/space-grotesk-latin.woff2View on unpkg

bin/geometra-mcp-launcher.mjsView file

•matchType = normalized_sha256 matchedPackage = job-forge@2.14.52 matchedPath = bin/geometra-mcp-launcher.mjs matchedIdentity = npm:am9iLWZvcmdl:2.14.52 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/geometra-mcp-launcher.mjsView on unpkg

bin/job-forge.mjsView file

•matchType = token_shingles matchedPackage = job-forge@2.14.52 matchedPath = bin/job-forge.mjs matchedIdentity = npm:am9iLWZvcmdl:2.14.52 similarity = 1.000 shingleOverlap = 48 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/job-forge.mjsView on unpkg

merge-tracker.mjsView file

•matchType = normalized_sha256 matchedPackage = job-forge@2.14.52 matchedPath = merge-tracker.mjs matchedIdentity = npm:am9iLWZvcmdl:2.14.52 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

merge-tracker.mjsView on unpkg

scripts/batch-orchestrator.mjsView file

•matchType = normalized_sha256 matchedPackage = job-forge@2.14.52 matchedPath = scripts/batch-orchestrator.mjs matchedIdentity = npm:am9iLWZvcmdl:2.14.52 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/batch-orchestrator.mjsView on unpkg

modes/reference-portals.mdView file

Lines 48-88markdown

48- **Some Greenhouse tenants route OTP through third-party verification (Toast uses ClinchTalent).** If `from:greenhouse` returns empty after a Greenhouse submit, check the tenant-specific sender row above. Confirmed 2026-04-19: Toast Principal SWE #807 and Toast Senior FE #808.

50---

52## BYO Proxy + Block Detection

54**Problem:** Some portals return CAPTCHA, challenge, access-denied, unsupported-browser, rate-limit, or similar blocked states before a form can be read or submitted. `imeFriendly: true` fixes React validation lag, but it cannot change a server-side portal decision.

modes/_shared.mdView file

Lines 79-119markdown

79- **In Draft Answers (Section G):** Place the transition narrative in the first response.

80- **When the JD asks for "entrepreneurial", "ownership", "builder", "end-to-end":** This is the #1 differentiator. Increase match weight.

82### Use the cross-cutting advantage frame

84Frame the candidate as a **"Technical builder with real-world proof"**. Adapt the phrasing per archetype.

86- For PM: "builder who reduces uncertainty with prototypes then productionizes with discipline."

Source & flagged code

15 flagged · loading source

package.jsonView file

•scripts.postinstall = node bin/sync.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

config/profile.example.ymlView file

53patternName = generic_password severity = medium line = 53 matchedText = # pass...026"

Medium

Secret Pattern

Package contains a possible secret pattern.

config/profile.example.ymlView on unpkg · L53

124patternName = generic_password severity = medium line = 124 matchedText = # pass...auth

Medium

Secret Pattern

Hardcoded password in config/profile.example.yml

config/profile.example.ymlView on unpkg · L124

Findings

1 Critical8 High9 Medium5 Low

CriticalAi Agent Control Hijackbin/sync.mjs

HighInstall Time Lifecycle Scriptspackage.json

HighCopied Package Dependency Bridgescripts/receipts.mjs

HighShips High Entropy Blobfonts/space-grotesk-latin.woff2

HighKnown Malware Source Similaritybin/create-job-forge.mjs

HighKnown Malware Source Similaritybin/geometra-mcp-launcher.mjs

HighKnown Malware Source Similaritybin/job-forge.mjs

HighKnown Malware Source Similaritymerge-tracker.mjs

HighKnown Malware Source Similarityscripts/batch-orchestrator.mjs

MediumSecret Patternconfig/profile.example.yml

MediumDynamic Requirebin/create-job-forge.mjs