Loading npm security reports…

ksk-design-system@1.58.0: AI-agent control-surface risk | LPM Firewall

registry / ksk-design-system / 1.58.0

ksk-design-system@1.58.0

KSK Design System — フリーランス向けマルチテーマ対応デザインシステム

AI Security Review

scanned 3h ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. On installation, the package writes AGENTS.md and CLAUDE.md into a consuming project's root when those files are absent. These are AI-agent instruction/control files supplied by the package.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

npm installation that executes postinstall in a consumer project with no existing AGENTS.md or CLAUDE.md.

Impact

Unconsented modification of a foreign project’s AI-agent control surface; future agent behavior can be governed by package-controlled instructions.

Mechanism

postinstall copies package-authored AI-agent instruction files into the consumer root.

Policy narrative

Installing the package invokes its postinstall script. In a consumer project, the script selects the consumer root from INIT_CWD, then copies package templates to root-level AGENTS.md and CLAUDE.md if absent. Those files direct AI coding agents to follow package rules and read package-controlled documents. This is an unconsented install-time mutation of a foreign AI-agent control surface.

Rationale

Source inspection confirms the lifecycle hook automatically creates root-level AI-agent instruction files in consumer projects. The no-overwrite guard reduces scope but does not remove the unconsented control-surface mutation on projects lacking those files.

Evidence

package.jsonbin/init.jstemplates/AGENTS.mdtemplates/CLAUDE.mdAGENTS.mdCLAUDE.md

Decision evidence

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node bin/init.js postinstall

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node bin/init.js postinstall

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/init.jsView file

5// AI エージェントは node_modules 配下のファイルを自動で読まないため、 L6: // プロジェクトルートに AGENTS.md / CLAUDE.md（node_modules 内の DS ルールを L7: // 参照する薄いポインタ）を置く必要がある。 ... L9: // Usage: L10: // npx ksk-design-system init # AGENTS.md + CLAUDE.md を設置 L11: // npx ksk-design-system init --force # 既存ファイルを上書き ... L17: L18: import { copyFileSync, existsSync, readdirSync } from "node:fs" L19: import { dirname, join, resolve } from "node:path" ... L229: const files = [ L230: { src: "templates/AGENTS.md", dest: "AGENTS.md", label: "Codex 用" }, L231: { src: "templates/CLAUDE.md", dest: "CLAUDE.md", label: "Claude Code 用" },

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

bin/init.jsView on unpkg · L5

20Manifest entrypoint (scripts.postinstall) carries capability families absent from dist/build output: environment+network, execution+network L20: import { fileURLToPath } from "node:url" L21: import { spawnSync } from "node:child_process" L22: L23: const __dirname = dirname(fileURLToPath(import.meta.url)) L24: const pkgRoot = resolve(__dirname, "..") ... L177: "--depth=1", L178: "https://github.com/ekusiek716/ksk-design-system.git", L179: targetDir, ... L215: const isPostinstall = cmd === "postinstall" L216: const consumerRoot = process.env.INIT_CWD || process.cwd() L217: ... L222: }

High

Entrypoint Build Divergence

Manifest entrypoint contains risky behavior absent from dist/build output.

bin/init.jsView on unpkg · L20

•matchType = token_shingles matchedPackage = ksk-design-system@1.52.0 matchedPath = bin/init.js matchedIdentity = npm:a3NrLWRlc2lnbi1zeXN0ZW0:1.52.0 similarity = 0.750 shingleOverlap = 36 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/init.jsView on unpkg

•matchType = previous_version_dangerous_delta matchedPackage = ksk-design-system@1.51.2 matchedIdentity = npm:a3NrLWRlc2lnbi1zeXN0ZW0:1.51.2 similarity = 0.688 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bin/init.jsView on unpkg

Source & flagged code

6 flagged

package.jsonView file

Lines 157-197json

157 "metrics": "node scripts/download-metrics.mjs",

158 "generate:lookup": "node scripts/generate-component-lookup.mjs",

159 "generate:native-lookup": "node scripts/generate-native-component-lookup.mjs",

160 "generate:safelist": "node scripts/generate-source-safelist.mjs",

161 "lint:safelist": "node scripts/generate-source-safelist.mjs --check",

162 "generate:tokens": "node scripts/generate-platform-tokens.mjs",

163 "lint:tokens": "node scripts/generate-platform-tokens.mjs --check",

164 "lint:token-hex": "node scripts/generate-token-hex-cache.mjs --check",

165 "check:native": "tsc -p tsconfig.native.json --noEmit",

166 "check:native-parity": "node scripts/check-native-parity.mjs",

167 "check:native-lookup": "node scripts/generate-native-component-lookup.mjs --check",

168 "test": "vitest run",

169 "test:consumer:web": "npm run build:lib && node scripts/test-packed-web-consumer.mjs",

170 "test:consumer:native": "npm run build:lib && node scripts/test-packed-native-consumer.mjs",

171 "test:jest-consumer": "node scripts/test-jest-consumer.mjs",

172 "test:watch": "vitest",

173 "test:interaction": "vitest run --config vitest.storybook.config.ts",

174 "test:a11y": "vitest run --config vitest.a11y.config.ts",

175 "check": "tsc -p tsconfig.app.json --noEmit && tsc -p tsconfig.type-tests.json --noEmit && bash scripts/lint-scratch.sh && bash scripts/check-deps.sh && node scripts/check-published-deps.mjs && node scripts/check-css-setup.mjs && bash scripts/check-drift.sh && node scripts/check-screen-contracts.mjs && node scripts/check-docs-drift.mjs && node scripts/check-agents-docs-sync.mjs && node scripts/check-contrast.mjs && node scripts/check-design-md.mjs && node scripts/check-tailwind-v4.mjs && node scripts/check-prefix-order.mjs && node scripts/check-flex-shrink.mjs && node scripts/check-depreca ...

176 "check:agent": "npm run lint && npm run check && npm test && npm run lint:story-reuse",

177 "postinstall": "node bin/init.js postinstall",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L177

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L177

178 "version": "node scripts/sync-version.mjs",

179 "mcp:build": "cd mcp-server && npm install && npm run build",

180 "mcp:start": "node mcp-server/dist/index.js"

181 },

182 "dependencies": {

183 "@radix-ui/react-slot": "^1.0.0",

184 "class-variance-authority": "^0.7.1",

185 "clsx": "^2.1.1",

186 "iconsax-reactjs": "^0.0.8",

187 "radix-ui": "^1.0.0",

188 "react-day-picker": "^10.0.1",

189 "react-hook-form": "^7.75.0",

190 "tailwind-merge": "^3.5.0",

191 "typescript": "^6.0.3"

192 },

193 "peerDependencies": {

194 "@react-navigation/bottom-tabs": ">=7.0.0",

195 "expo-blur": "*",

196 "expo-glass-effect": "*",

197 "react": "^18.0.0 || ^19.0.0",

Long lines were clipped for display.

bin/init.jsView file

Lines 1-40javascript

1#!/usr/bin/env node

2

3// ksk-design-system CLI

4// Consumer プロジェクトに AI (Claude / Codex) 向けルールファイルを設置する。

5// AI エージェントは node_modules 配下のファイルを自動で読まないため、

6// プロジェクトルートに AGENTS.md / CLAUDE.md（node_modules 内の DS ルールを

7// 参照する薄いポインタ）を置く必要がある。

8//

9// Usage:

10// npx ksk-design-system init # AGENTS.md + CLAUDE.md を設置

11// npx ksk-design-system init --force # 既存ファイルを上書き