Loading npm security reports…

kld-sdd@2.7.8-3: Malicious npm security report (Block) | LPM Firewall

registry / kld-sdd / 2.7.8-3

kld-sdd@2.7.8-3

KLD SDD OpenSpec 项目初始化工具 - 一键部署 SDD skills

AI Security Review

scanned 26d ago · by lpm-firewall-ai

The explicit initializer installs event-triggered agent hooks and telemetry code into a consumer project. Supported SDD commands then send the local Git name, email, command, and timestamp to a hard-coded HTTP endpoint.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

A user runs the kld-sdd initializer and later starts a supported deployed SDD command.

Impact

Unconsented disclosure of local Git identity and usage metadata over unencrypted HTTP, plus persistent project agent command hooks.

Mechanism

Project agent-hook installation followed by automatic identity-bearing telemetry.

Attack narrative

After explicit initialization, the package writes agent hook settings and telemetry modules into the target project. When a supported SDD command starts, the deployed runtime invokes its usage reporter. The reporter obtains the local Git user name and email, combines them with a usage event, and posts the data to a hard-coded private HTTP server. Failures are intentionally ignored, so reporting does not affect normal command completion.

AI rationale

This is concrete identity and usage exfiltration to an undeclared hard-coded HTTP endpoint, coupled with persistent agent hook installation. The absence of an npm lifecycle hook does not remove the risk once the advertised initializer is run.

Evidence

lib/init.jstemplates/hooks/claude/settings.jsonskywalk-sdd/index.cjsskywalk-sdd/lib/usage-contract.cjsskywalk-sdd/lib/usage-reporter.cjsskywalk-sdd/lib/git-identity.cjs.claude/settings.json

Source & flagged code

6 flagged · loading source

bin/kld-sdd-init.jsView file

13L14: const path = require('path'); L15: const args = process.argv.slice(2);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/kld-sdd-init.jsView on unpkg · L13

skywalk-sdd/ontology/id.cjsView file

1'use strict'; L2:

Low

Weak Crypto

Package source references weak cryptographic algorithms.

skywalk-sdd/ontology/id.cjsView on unpkg · L1

lib/init.jsView file

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. outer = path.join(anchor, 'skywalk-sdd'); let st = null; try { st = fs.lstatsync(outer); } catch (err) { if (err && err.code === 'enoent') return { ok: true, removed: false }; throw err; } const hint = path.join(anchor, '.sdd-spec-root'); const hashint = fs.existssync(hint); let hasnestedentity = false; try { for (const name of fs.readdirsync(anchor)) { if (!/-sdd-specs$/i.test(name)) continue; const entity = path.join(anchor, name, 'skywalk-sdd', 'log.cjs'); if (fs.existssync(entity)) { hasnestedentity = true; break; } } } catch { } if (!hashint && !hasnestedentity) {

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

lib/init.jsView on unpkg

•matchType = previous_version_dangerous_delta matchedPackage = kld-sdd@2.7.8-1 matchedIdentity = npm:a2xkLXNkZA:2.7.8-1 similarity = 0.861 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

lib/init.jsView on unpkg

1761if (!skipTemplate) { // skills / 编辑器产物：永远只装在当前工作目录一次 cleanupNativeOpenspecCommands(selectedTools); cleanupLegacyBundledOpsxSkills(selectedTools); deployOpsxSkills(selectedTools); cleanupNativeOpenspecSkills(selectedTools); deployProfileArtifacts(selectedTools, workspaceRoot, getPackagePath());

High

Ai Review Evidence

The initializer deploys selected agent artifacts into the consumer project.

lib/init.jsView on unpkg · L1761

lib/managed-hook-hashes.jsonView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

lib/managed-hook-hashes.jsonView on unpkg

Source & flagged code

6 flagged

bin/kld-sdd-init.jsView file

Lines 1-33javascript

1#!/usr/bin/env node

2

3/**

4 * KLD SDD 项目初始化工具

5 * 一键配置团队标准化开发环境，内置 openSpec 模版

6 *

7 * 子命令:

8 * (无参数) 运行项目初始化

9 * log SDD Telemetry CLI（记录阶段事件、查询指标）

10 * link-spec 将代码仓关联到本地 spec clone（git config sdd.specPath）

11 * sync-repos 工作目录下发现新增代码仓并轻量接入（不装 skills）

12 */

13

14const path = require('path');

15const args = process.argv.slice(2);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/kld-sdd-init.jsView on unpkg · L13

16

17if (args[0] === 'log') {

18 // Telemetry CLI 模式

19 require('../skywalk-sdd/index.cjs').main();

20} else if (args[0] === 'link-spec') {

21 const sddConfig = require('../skywalk-sdd/ontology/sdd-config.cjs');

22 const pathArg = args.find((item) => item.startsWith('--path='));

23 const projectArg = args.find((item) => item.startsWith('--project='));

24 const positional = args.slice(1).find((item) => !item.startsWith('--'));

25 const specPath = pathArg ? pathArg.slice('--path='.length) : positional;

26 const projectRoot = path.resolve(projectArg ? projectArg.slice('--project='.length) : '.');

27 if (!specPath) {

28 console.error('用法: kld-sdd link-spec --path=<spec-clone> [--project=.]');

29 process.exit(1);

30 }

31 const result = sddConfig.setSpecPath(projectRoot, specPath);

32 if (!result.ok) {

33 console.error(`❌ ${result.message}`);

skywalk-sdd/ontology/id.cjsView file

Lines 1-21javascript

1'use strict';

2

Low

Weak Crypto

Package source references weak cryptographic algorithms.

skywalk-sdd/ontology/id.cjsView on unpkg · L1

3const crypto = require('crypto');

4const { ID_PREFIX_TYPES, entityTypeForId } =

lib/init.jsView file

Lines 1741-1781javascript

1741 });

1742 console.log(`📌 使用 spec 目录: ${customSpec.rel}`);

1743 console.log();

1744 } else if (!specPackage && !(skipTemplate

lib/managed-hook-hashes.jsonView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

lib/managed-hook-hashes.jsonView on unpkg