llm-wiki-loop@1.0.1: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

llm-wiki-loop@1.0.1: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/install.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/install.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

scripts/install.jsView file

5// Global install (npm i -g): copies into the home skill dirs of detected L6: // runtimes (Claude Code ~/.claude/skills, opencode ~/.config/opencode/skills, L7: // Codex CLI ~/.agents/skills). L8: // L9: // Project install (npm i in a project): copies into the project's runtime L10: // skill dirs (.claude/skills, .opencode/skills, .agents/skills, L11: // .cursor/skills) whose base directory already exists. ... L20: const GLOBAL_RUNTIMES = [ L21: { marker: path.join(HOME, ".claude"), dir: path.join(HOME, ".claude", "skills") }, L22: { marker: path.join(HOME, ".config", "opencode"), dir: path.join(HOME, ".config", "opencode", "skills") }, L23: { marker: path.join(HOME, ".agents"), dir: path.join(HOME, ".agents", "skills") }, L24: { marker: path.join(HOME, ".cursor"), dir: path.join(HOME,

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/install.jsView on unpkg · L5

•matchType = normalized_sha256 matchedPackage = llm-wiki-loop@1.1.0 matchedPath = scripts/install.js matchedIdentity = npm:bGxtLXdpa2ktbG9vcA:1.1.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/install.jsView on unpkg

bin/cli.jsView file

•Runtime or CLI code links a write operation to an explicit external AI-agent control path: uld not install to ${base}: ${err.message}`); } } } } } if (installed.length > 0) { console.log(`\nsuccessfully installed wiki-manager skill to:`); for (const dest of installed) { console.log(` - ${dest}`); } console.log(`\nrestart your agent runtime to activate.`); } else { console.log(`no supported agent runtime found. use --global or specify --custom <path>.`); } } function runinit(targetdir) { const root = targetdir ? path.resolve(targetdir) : process.cwd(); console.log(`scaffolding llm-wiki vault in: ${root}\n`); const dirs = [ 'raw/notes', 'raw/data', 'raw/assets', 'wiki/concepts', 'wiki/topics', 'wi

High

External Ai Agent Control Surface Mutation

Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.

bin/cli.jsView on unpkg

•matchType = normalized_sha256 matchedPackage = llm-wiki-loop@1.1.0 matchedPath = bin/cli.js matchedIdentity = npm:bGxtLXdpa2ktbG9vcA:1.1.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/cli.jsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = 4d07121b3053492a signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = llm-wiki-loop@1.1.0 matchedPath = bin/cli.js matchedIdentity = npm:bGxtLXdpa2ktbG9vcA:1.1.0 similarity = 1.000 shingleOverlap = 2 summary = package final verdict is malicious

skills/wiki-manager/scripts/check_evidence.pyView file

•path = skills/wiki-manager/scripts/check_evidence.py kind = build_helper sizeBytes = 15598 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

skills/wiki-manager/scripts/check_evidence.pyView on unpkg

Source & flagged code

8 flagged

package.jsonView file

Lines 16-46json

16 "obsidian",

17 "skills"

18 ],

19 "bin": {

20 "llm-wiki": "bin/cli.js",

21 "llm-wiki-loop": "bin/cli.js"

22 },

23 "files": [

24 "bin",

25 "skills",

26 "scripts",

27 "README.md",

28 "SPEC.md",

29 "AGENTS.md",

30 "LICENSE"

31 ],

32 "scripts": {

33 "lint": "node --check bin/cli.js \u0026\u0026 node --check scripts/install.js",

34 "test": "py -m unittest discover -s tests",

35 "test:cli": "node bin/cli.js doctor",

36 "postinstall": "node scripts/install.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L36

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L36

37 },

38 "engines": {

39 "node": "\u003e=16.17"

40 },

41 "homepage": "https://github.com/PALAN-K/llm-wiki-loop#readme",

42 "repository": {

43 "type": "git",

44 "url": "git+https://github.com/PALAN-K/llm-wiki-loop.git"

45 }

46}

scripts/install.jsView file

Lines 1-25javascript

1#!/usr/bin/env node

2// Installs the wiki-manager skill into detected agent runtimes.

3// Postinstall-safe: never fails an npm install; prints guidance instead.

4//

5// Global install (npm i -g): copies into the home skill dirs of detected

6// runtimes (Claude Code ~/.claude/skills, opencode ~/.config/opencode/skills,

7// Codex CLI ~/.agents/skills).

8//

9// Project install (npm i in a project): copies into the project's runtime

10// skill dirs (.claude/skills, .opencode/skills, .agents/skills,

bin/cli.jsView file

•Runtime or CLI code links a write operation to an explicit external AI-agent control path: uld not install to ${base}: ${err.message}`); } } } } } if (installed.length > 0) { console.log(`\nsuccessfully installed wiki-manager skill to:`); for (const dest of installed) { console.log(` - ${dest}`); } console.log(`\nrestart your agent runtime to activate.`); } else { console.log(`no supported agent runtime found. use --global or specify --custom <path>.`); } } function runinit(targetdir) { const root = targetdir ? path.resolve(targetdir) : process.cwd(); console.log(`scaffolding llm-wiki vault in: ${root}\n`); const dirs = [ 'raw/notes', 'raw/data', 'raw/assets', 'wiki/concepts', 'wiki/topics', 'wi

High

External Ai Agent Control Surface Mutation

Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.

bin/cli.jsView on unpkg

•matchType = normalized_sha256 matchedPackage = llm-wiki-loop@1.1.0 matchedPath = bin/cli.js matchedIdentity = npm:bGxtLXdpa2ktbG9vcA:1.1.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/cli.jsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = 4d07121b3053492a signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = llm-wiki-loop@1.1.0 matchedPath = bin/cli.js matchedIdentity = npm:bGxtLXdpa2ktbG9vcA:1.1.0 similarity = 1.000 shingleOverlap = 2 summary = package final verdict is malicious

skills/wiki-manager/scripts/check_evidence.pyView file

•path = skills/wiki-manager/scripts/check_evidence.py kind = build_helper sizeBytes = 15598 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

skills/wiki-manager/scripts/check_evidence.pyView on unpkg