Loading npm security reports…

ksk-design-system: AI-agent policy block | LPM Firewall

registry / ksk-design-system / 1.41.0

ksk-design-system@1.41.0

KSK Design System — フリーランス向けマルチテーマ対応デザインシステム

AI Security Review

scanned 20d ago · by lpm-firewall-ai

LPM blocks this version under the AI-agent control-surface policy. The package mutates AI-agent control files during npm postinstall. It drops package-supplied AGENTS.md and CLAUDE.md into the consuming project root without an explicit user CLI action.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm install of ksk-design-system in a consumer project

Impact

Can influence Codex/Claude behavior in the consuming repository by adding project-root agent instructions that point back to package-controlled rules.

Mechanism

postinstall AI-agent instruction file drop

Policy narrative

On install, npm runs node bin/init.js postinstall. In consumer installs, bin/init.js resolves the consumer root from INIT_CWD, checks for package.json, then copies templates/AGENTS.md and templates/CLAUDE.md into that root. Those files are AI-agent instructions telling Codex/Claude to load package rules from node_modules before UI work. This is an unconsented lifecycle mutation of AI-agent control surface, even though it is framed as design-system setup.

Rationale

Static inspection confirms concrete install-time writes of AI-agent instruction files into consumer projects. No exfiltration was found, but this matches the firewall policy for unconsented lifecycle AI-agent control-surface mutation.

Evidence

package.jsonbin/init.jstemplates/AGENTS.mdtemplates/CLAUDE.mdbin/lint.jsdist/index.jsAGENTS.mdCLAUDE.md

Decision evidence

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node bin/init.js postinstall

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node bin/init.js postinstall

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/init.jsView file

1Install-time AI-agent control hijack evidence: L5: // AI エージェントは node_modules 配下のファイルを自動で読まないため、 L6: // プロジェクトルートに AGENTS.md / CLAUDE.md（node_modules 内の DS ルールを L7: // 参照する薄いポインタ）を置く必要がある。 ... L9: // Usage: L10: // npx ksk-design-system init # AGENTS.md + CLAUDE.md を設置 L11: // npx ksk-design-system init --force # 既存ファイルを上書き ... L15: L16: import { copyFileSync, existsSync } from "node:fs" L17: import { dirname, join, resolve } from "node:path" ... L130: const files = [ L131: { src: "templates/AGENTS.md", dest: "AGENTS.md", label: "Codex 用" }, L132: { src: "templates/CLAUDE.md", dest: "CLAUDE.md", label: "Claude Code 用" }, Payload evidence from templates/AGENTS.md: L1: <!-- L2: このファイルは ksk-design-system の postinstall で自動設置されました。

Critical

Ai Agent Control Hijack

Install-time source drops package-supplied AI-agent/MCP control files or instructions.

bin/init.jsView on unpkg · L1

18import { fileURLToPath } from "node:url" L19: import { spawnSync } from "node:child_process" L20:

High

Child Process

Package source references child process execution.

bin/init.jsView on unpkg · L18

18Manifest entrypoint (scripts.postinstall) carries capability families absent from dist/build output: environment+network, execution+network L18: import { fileURLToPath } from "node:url" L19: import { spawnSync } from "node:child_process" L20: L21: const __dirname = dirname(fileURLToPath(import.meta.url)) L22: const pkgRoot = resolve(__dirname, "..") ... L78: "--depth=1", L79: "https://github.com/ekusiek716/ksk-design-system.git", L80: targetDir, ... L116: const isPostinstall = cmd === "postinstall" L117: const consumerRoot = process.env.INIT_CWD || process.cwd() L118: ... L123: }

High

Entrypoint Build Divergence

Manifest entrypoint contains risky behavior absent from dist/build output.

bin/init.jsView on unpkg · L18

9// Usage: L10: // npx ksk-design-system init # AGENTS.md + CLAUDE.md を設置 L11: // npx ksk-design-system init --force # 既存ファイルを上書き ... L18: import { fileURLToPath } from "node:url" L19: import { spawnSync } from "node:child_process" L20:

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/init.jsView on unpkg · L9

Source & flagged code

6 flagged

package.jsonView file

Lines 136-176json

136 "build-storybook": "storybook build",

137 "lint:scratch": "bash scripts/lint-scratch.sh",

138 "lint:deps": "bash scripts/check-deps.sh",

139 "lint:responsive": "bash scripts/check-responsive.sh",

140 "lint:story-reuse": "bash scripts/check-story-reuse.sh",

141 "lint:contrast": "node scripts/check-contrast.mjs",

142 "lint:design": "node scripts/check-design-md.mjs",

143 "lint:tailwind": "node scripts/check-tailwind-v4.mjs",

144 "lint:prefix-order": "node scripts/check-prefix-order.mjs",

145 "generate:lookup": "node scripts/generate-component-lookup.mjs",

146 "generate:native-lookup": "node scripts/generate-native-component-lookup.mjs",

147 "generate:tokens": "node scripts/generate-platform-tokens.mjs",

148 "lint:tokens": "node scripts/generate-platform-tokens.mjs --check",

149 "check:native": "tsc -p tsconfig.native.json --noEmit",

150 "check:native-parity": "node scripts/check-native-parity.mjs",

151 "check:native-lookup": "node scripts/generate-native-component-lookup.mjs --check",

152 "test": "vitest run",

153 "test:watch": "vitest",

154 "check": "tsc -p tsconfig.app.json --noEmit && bash scripts/lint-scratch.sh && bash scripts/check-deps.sh && bash scripts/check-drift.sh && node scripts/check-contrast.mjs && node scripts/check-design-md.mjs && node scripts/check-tailwind-v4.mjs && node scripts/check-prefix-order.mjs && node scripts/generate-component-lookup.mjs --check && node scripts/generate-platform-tokens.mjs --check && tsc -p tsconfig.native.json --noEmit && node scripts/check-native-parity.mjs && node scripts/generate-native-component-lookup.mjs --check",

155 "check:agent": "npm run lint && npm run check && npm test && npm run lint:story-reuse",

156 "postinstall": "node bin/init.js postinstall",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L156

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L156

157 "mcp:build": "cd mcp-server && npm install && npm run build",

158 "mcp:start": "node mcp-server/dist/index.js"

159 },

160 "dependencies": {

161 "class-variance-authority": "^0.7.1",

162 "clsx": "^2.1.1",

163 "react-day-picker": "^10.0.1",

164 "react-hook-form": "^7.75.0",

165 "tailwind-merge": "^3.5.0"

166 },

167 "peerDependencies": {

168 "@radix-ui/react-slot": "^1.0.0",

169 "@react-navigation/bottom-tabs": ">=7.0.0",

170 "expo-blur": "*",

171 "expo-glass-effect": "*",

172 "iconsax-reactjs": "^0.0.8",

173 "radix-ui": "^1.0.0",

174 "react": "^18.0.0 || ^19.0.0",

175 "react-dom": "^18.0.0 || ^19.0.0",

176 "react-native": ">=0.74.0",

bin/init.jsView file

Lines 1-38javascript

1#!/usr/bin/env node

2

3// ksk-design-system CLI

4// Consumer プロジェクトに AI (Claude / Codex) 向けルールファイルを設置する。

5// AI エージェントは node_modules 配下のファイルを自動で読まないため、

6// プロジェクトルートに AGENTS.md / CLAUDE.md（node_modules 内の DS ルールを

7// 参照する薄いポインタ）を置く必要がある。

8//

9// Usage:

10// npx ksk-design-system init # AGENTS.md + CLAUDE.md を設置

11// npx ksk-design-system init --force # 既存ファイルを上書き