registry / AI-agent control-surface risk / loragent

loragent

224-agent virtual software firm for Lorapok Labs — Hub-and-Spoke topology, 6 squad formations, TiTi Vault zero-trust enclave, MCP lazy-loading, and autonomous multi-agent orchestration.

This report shows the evidence for loragent@2.0.1. 2 of 2 known versions are blocked or flagged. See all versions.

AI Security Review

scanned 12d ago · by lpm-firewall-ai

The postinstall hook automatically writes MCP configuration and installs skills into global agent directories. This meets the blocking policy for unconsented install-time mutation of a broad AI-agent control surface.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

Installing the package with npm, which runs its postinstall hook.

Impact

The package can register its MCP server and add its skills to multiple user-level agent environments during installation.

Mechanism

The hook runs the sync script, which merges MCP server entries into configuration files and copies package skills into global agent skill directories.

Policy narrative

The postinstall hook launches a sync script that modifies user-level MCP configuration and copies package skills into global agent directories. This is an unconsented install-time change to AI-agent control surfaces.

AI rationale

Evidence

package.jsonscripts/universal-sync.js

Decision evidence

public snapshot

AI identified this as a dangerous AI-agent capability at 97.0% confidence with low false-positive risk.

Evidence for policy risk

package.json runs `npm run sync` from its postinstall hook.
scripts/universal-sync.js merges MCP server definitions and installs Loragent into users’ MCP configuration files.
The sync script copies package skills into global skill directories, including agent tooling locations.
scripts/generate-artifact.js writes Cursor rules when invoked for artifact generation.

Evidence against

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 64 file(s), 616 KB of source, external domains: api.anthropic.com, api.cloudflare.com, api.github.com, bindings.mcp.cloudflare.com, builds.mcp.cloudflare.com, docs.fal.ai, docs.mcp.cloudflare.com, docs.stripe.com, fonts.googleapis.com, fonts.gstatic.com, github.com, loragent.lorapok.tech, maijied.github.io, mcp.cloudflare.com, mcp.lorapk-labs.workers.dev, mission-control.lorapok.tech, observability.mcp.cloudflare.com, proxy.golang.org, replicate.com, sdk.vercel.ai, www.w3.org

Source & flagged code

16 flagged

package.jsonView file

Lines 98-132json

98 "title": "Loragent: Select Squad Formation Matrix",

99 "category": "Loragent"

100 },

101 {

102 "command": "loragent.sync",

103 "title": "Loragent: Synchronize All 224 Agent Skills",

104 "category": "Loragent"

105 },

106 {

107 "command": "loragent.titiVault",

108 "title": "Loragent: TiTi Vault Enclave Status",

109 "category": "Loragent"

110 }

111 ]

112 },

113 "scripts": {

114 "start": "node ./face/cli/index.js",

115 "build": "node scripts/build-website-data.js && npm --prefix website run build",

116 "sync-rules": "node scripts/universal-sync.js",

117 "sync": "node scripts/universal-sync.js",

118 "postinstall": "npm run sync",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L118

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L118

119 "docs:dev": "vitepress dev docs",

120 "docs:build": "vitepress build docs",

121 "docs:preview": "vitepress preview docs",

122 "deploy:all": "node scripts/deploy-all.js",

123 "package:vsix": "vsce package --no-dependencies",

124 "test": "node --test"

125 },

126 "dependencies": {

127 "@modelcontextprotocol/sdk": "^1.30.0",

128 "commander": "^15.0.0"

129 },

130 "type": "module"

131}

132

bin/loragent-email.jsView file

Lines 1-25javascript

1#!/usr/bin/env node

3import fs from 'fs';

4import os from 'os';

5import path from 'path';

6import { execSync } from

scripts/sync-wrangler-vault.mjsView file

Lines 1-24javascript

1#!/usr/bin/env node

2/**

3 * Loragent — use wrangler OAuth to GET deploy auth and SET vault + GitHub + Pages/worker secrets.

4 *

5 * Prereq: cd cursor-usage-monitor/website/admin && npx wrangler login

6 *

7 * node scripts/sync-wrangler-vault.mjs

8 * node scripts/sync-wrangler-vault.mjs --skip-mail # skip enable-mail worker setup

9 * node scripts/sync-wrangler-vault.mjs --dry-run

10 */

scripts/universal-sync.jsView file

•Runtime or CLI code links a write operation to an explicit external AI-agent control path: '..'); const home = os.homedir(); const platform = os.platform(); const args = process.argv.slice(2); let filter_query = ''; let category_filter = ''; for (let i = 0; i < args.length; i++) { if ((args[i] === '-f' || args[i] === '--filter') && args[i + 1]) { filter_query = args[i + 1].tolowercase(); } if ((args[i] === '-c' || args[i] === '--category') && args[i + 1]) { category_filter = args[i + 1].tolowercase(); } } const getappdatapath = () => { if (platform === 'win32') return process.env.appdata || path.join(home, 'appdata', 'roaming'); if (platform === 'darwin') return path.join(home, 'library', 'application s

High

External Ai Agent Control Surface Mutation

Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.

scripts/universal-sync.jsView on unpkg

port/mcp/server.jsView file

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. allowdestructive }); return { iserror: !res.ok, content: [{ type: "text", text: `command: ${command}\nexit code: ${res.code}\n\nstdout:\n${res.stdout}\n\nstderr:\n${res.stderr}` }] }; } catch (err) { return { iserror: true, content: [{ type: "text", text: `execution error: ${err.message}` }] }; } } ); server.tool( "loragent_steer", "formally pass context and payloads to the next agent in the dynamic formati

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

port/mcp/server.jsView on unpkg

•matchType = normalized_sha256 matchedPackage = loragent@2.0.0 matchedPath = port/mcp/server.js matchedIdentity = npm:bG9yYWdlbnQ:2.0.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

port/mcp/server.jsView on unpkg

.cursor/skills/secure-cred-vault/scripts/install.shView file

•path = .cursor/skills/secure-cred-vault/scripts/install.sh kind = payload_in_excluded_dir sizeBytes = 1492 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.cursor/skills/secure-cred-vault/scripts/install.shView on unpkg

•path = .cursor/skills/secure-cred-vault/scripts/install.sh kind = build_helper sizeBytes = 1492 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

.cursor/skills/secure-cred-vault/scripts/install.shView on unpkg

scripts/generate-artifact.jsView file

•matchType = normalized_sha256 matchedPackage = loragent@2.0.0 matchedPath = scripts/generate-artifact.js matchedIdentity = npm:bG9yYWdlbnQ:2.0.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/generate-artifact.jsView on unpkg

face/cli/commands/mcp.jsView file

•matchType = normalized_sha256 matchedPackage = loragent@2.0.0 matchedPath = face/cli/commands/mcp.js matchedIdentity = npm:bG9yYWdlbnQ:2.0.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

face/cli/commands/mcp.jsView on unpkg

scripts/generate-vector-brand.jsView file

•matchType = normalized_sha256 matchedPackage = loragent@2.0.0 matchedPath = scripts/generate-vector-brand.js matchedIdentity = npm:bG9yYWdlbnQ:2.0.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/generate-vector-brand.jsView on unpkg

sdk/tools/cli-runner.jsView file

•matchType = normalized_sha256 matchedPackage = loragent@2.0.0 matchedPath = sdk/tools/cli-runner.js matchedIdentity = npm:bG9yYWdlbnQ:2.0.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

sdk/tools/cli-runner.jsView on unpkg

sdk/client.jsView file

•matchType = normalized_sha256 matchedPackage = loragent@2.0.0 matchedPath = sdk/client.js matchedIdentity = npm:bG9yYWdlbnQ:2.0.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

sdk/client.jsView on unpkg

Source & flagged code

16 flagged · loading source

package.jsonView file

•scripts.postinstall = npm run sync

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = npm run sync

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/loragent-email.jsView file

5import path from 'path'; L6: import { execSync } from 'child_process'; L7: import { getPin } from '../src/lore/auth/pin-manager.js';

High

Child Process

Package source references child process execution.

bin/loragent-email.jsView on unpkg · L5

Findings

15 High5 Medium4 Low

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processbin/loragent-email.js

HighShell

HighSame File Env Network Executionscripts/sync-wrangler-vault.mjs

HighExternal Ai Agent Control Surface Mutationscripts/universal-sync.js

HighTrigger Reachable External Ai Agent Control Surface Mutationport/mcp/server.js

HighRuntime Package Installscripts/sync-wrangler-vault.mjs

HighPayload In Excluded Dir.cursor/skills/secure-cred-vault/scripts/install.sh

HighKnown Malware Source Similaritybin/loragent-email.js

HighKnown Malware Source Similarityscripts/generate-artifact.js

HighKnown Malware Source Similarityface/cli/commands/mcp.js

Affected versions and remediation

This report applies to loragent@2.0.1.

The versions list below shows the verdict for each recorded version.

Avoid installing loragent@2.0.1. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-10-11 00:10:40.292Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

2 known versions

2.0.1latestshownMaliciousSoft block: AI-agent control surfaceBlockPublishedOct 11, 2026, 12:06 AM 2.0.0MaliciousSoft block: AI-agent control surfaceBlockPublishedAug 29, 2026, 3:42 PM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other AI-agent control-surface risk packages

Runtime surface

Behavioral surface

Related packages

Other AI-agent control-surface risk packages

Source & flagged code