ksk-design-system@1.46.1: AI-agent policy block | LPM Firewall

Loading npm security reports…

ksk-design-system@1.46.1: AI-agent policy block | LPM Firewall

Source & flagged code

4 flagged · loading source

package.jsonView file

•scripts.postinstall = node bin/init.js postinstall

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node bin/init.js postinstall

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/init.jsView file

1Install-time AI-agent control hijack evidence: L5: // AI エージェントは node_modules 配下のファイルを自動で読まないため、 L6: // プロジェクトルートに AGENTS.md / CLAUDE.md（node_modules 内の DS ルールを L7: // 参照する薄いポインタ）を置く必要がある。 ... L9: // Usage: L10: // npx ksk-design-system init # AGENTS.md + CLAUDE.md を設置 L11: // npx ksk-design-system init --force # 既存ファイルを上書き ... L16: L17: import { copyFileSync, existsSync } from "node:fs" L18: import { dirname, join, resolve } from "node:path" ... L149: const files = [ L150: { src: "templates/AGENTS.md", dest: "AGENTS.md", label: "Codex 用" }, L151: { src: "templates/CLAUDE.md", dest: "CLAUDE.md", label: "Claude Code 用" }, Payload evidence from templates/AGENTS.md: L1: <!-- L2: このファイルは ksk-design-system の postinstall で自動設置されました。

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

bin/init.jsView on unpkg · L1

19Manifest entrypoint (scripts.postinstall) carries capability families absent from dist/build output: environment+network, execution+network L19: import { fileURLToPath } from "node:url" L20: import { spawnSync } from "node:child_process" L21: L22: const __dirname = dirname(fileURLToPath(import.meta.url)) L23: const pkgRoot = resolve(__dirname, "..") ... L97: "--depth=1", L98: "https://github.com/ekusiek716/ksk-design-system.git", L99: targetDir, ... L135: const isPostinstall = cmd === "postinstall" L136: const consumerRoot = process.env.INIT_CWD || process.cwd() L137: ... L142: }

High

Entrypoint Build Divergence

Manifest entrypoint contains risky behavior absent from dist/build output.

bin/init.jsView on unpkg · L19

Source & flagged code

4 flagged

package.jsonView file

Lines 145-185json

145 "lint:design": "node scripts/check-design-md.mjs",

146 "lint:docs-drift": "node scripts/check-docs-drift.mjs",

147 "lint:tailwind": "node scripts/check-tailwind-v4.mjs",

148 "lint:prefix-order": "node scripts/check-prefix-order.mjs",

149 "lint:screen-contracts": "node scripts/check-screen-contracts.mjs",

150 "metrics": "node scripts/download-metrics.mjs",

151 "generate:lookup": "node scripts/generate-component-lookup.mjs",

152 "generate:native-lookup": "node scripts/generate-native-component-lookup.mjs",

153 "generate:tokens": "node scripts/generate-platform-tokens.mjs",

154 "lint:tokens": "node scripts/generate-platform-tokens.mjs --check",

155 "lint:token-hex": "node scripts/generate-token-hex-cache.mjs --check",

156 "check:native": "tsc -p tsconfig.native.json --noEmit",

157 "check:native-parity": "node scripts/check-native-parity.mjs",

158 "check:native-lookup": "node scripts/generate-native-component-lookup.mjs --check",

159 "test": "vitest run",

160 "test:consumer:web": "npm run build:lib && node scripts/test-packed-web-consumer.mjs",

161 "test:jest-consumer": "node scripts/test-jest-consumer.mjs",

162 "test:watch": "vitest",

163 "check": "tsc -p tsconfig.app.json --noEmit && bash scripts/lint-scratch.sh && bash scripts/check-deps.sh && node scripts/check-published-deps.mjs && node scripts/check-css-setup.mjs && bash scripts/check-drift.sh && node scripts/check-screen-contracts.mjs && node scripts/check-docs-drift.mjs && node scripts/check-contrast.mjs && node scripts/check-design-md.mjs && node scripts/check-tailwind-v4.mjs && node scripts/check-prefix-order.mjs && node scripts/generate-component-lookup.mjs --check && node scripts/generate-platform-tokens.mjs --check && node scripts/generate-token-hex-cache.mjs -- ...

164 "check:agent": "npm run lint && npm run check && npm test && npm run lint:story-reuse",

165 "postinstall": "node bin/init.js postinstall",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L165

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L165

166 "mcp:build": "cd mcp-server && npm install && npm run build",

167 "mcp:start": "node mcp-server/dist/index.js"

168 },

169 "dependencies": {

170 "@radix-ui/react-slot": "^1.0.0",

171 "class-variance-authority": "^0.7.1",

172 "clsx": "^2.1.1",

173 "iconsax-reactjs": "^0.0.8",

174 "radix-ui": "^1.0.0",

175 "react-day-picker": "^10.0.1",

176 "react-hook-form": "^7.75.0",

177 "tailwind-merge": "^3.5.0",

178 "typescript": "^6.0.3"

179 },

180 "peerDependencies": {

181 "@react-navigation/bottom-tabs": ">=7.0.0",

182 "expo-blur": "*",

183 "expo-glass-effect": "*",

184 "react": "^18.0.0 || ^19.0.0",

185 "react-dom": "^18.0.0 || ^19.0.0",

Long lines were clipped for display.

bin/init.jsView file

Lines 1-39javascript

1#!/usr/bin/env node

2

3// ksk-design-system CLI

4// Consumer プロジェクトに AI (Claude / Codex) 向けルールファイルを設置する。

5// AI エージェントは node_modules 配下のファイルを自動で読まないため、

6// プロジェクトルートに AGENTS.md / CLAUDE.md（node_modules 内の DS ルールを

7// 参照する薄いポインタ）を置く必要がある。

8//

9// Usage:

10// npx ksk-design-system init # AGENTS.md + CLAUDE.md を設置

11// npx ksk-design-system init --force # 既存ファイルを上書き