loragent@2.0.0
108-agent virtual software firm for Lorapok Labs — includes orchestration, image generation, GIF creation, deployment, development, business, and design agents. Hub-and-Spoke topology with MCP lazy-loading and crash recovery.
AI Security Review
scanned 14d ago · by lpm-firewall-aiThe automatic postinstall performs broad, consentless writes to user and project AI agent configuration surfaces, including MCP settings and agent rules. This meets the install-time control-surface blocking criterion.
Static reason
One or more suspicious static signals were detected.
Trigger
Installing the package with lifecycle scripts enabled triggers postinstall.
Impact
The installed package can alter which tools and instructions supported agent environments load, and can add remote MCP endpoints to those configurations.
Mechanism
The hook runs the universal sync routine, which rewrites MCP configuration files, copies skills into global agent directories, and generates project agent rules and modes without a consent check.
Policy narrative
A package install runs the universal sync routine automatically. The routine writes MCP entries to multiple user and project configuration locations and copies skills and rules into supported agent environments. Because these settings affect the tools and instructions agents load, the lifecycle-triggered broad configuration changes create an AI agent control surface risk.
AI rationale
The automatic postinstall performs broad, consentless writes to user and project AI agent configuration surfaces, including MCP settings and agent rules. This meets the install-time control-surface blocking criterion.
Evidence
package.jsonscripts/universal-sync.js~/.config and supported IDE MCP configuration filesglobal agent skill directoriesproject agent rule and mode files
Network endpoints2
mcp.cloudflare.com/mcpdocs.mcp.cloudflare.com/mcp
Decision evidence
public snapshotAI identified this as a dangerous AI-agent capability at 94.0% confidence with low false-positive risk.
Evidence for policy risk
- The package postinstall script automatically runs the universal sync routine.
- That routine rewrites MCP configuration in user and project directories, including adding the package's server and remote MCP entries.
- It copies package skills into global agent directories and writes agent rules and Roo Code modes into the project.
- The configured MCP server exposes agent steering and CLI execution tools, making these settings behavior-bearing.
Evidence against
- The sync behavior is consistent with installing Loragent's own agent tooling, and the inspected code shows no credential collection or exfiltration in this path.
- The shell alias installer is a separate script and is not invoked by the package lifecycle hook.
- The secret-looking values in the lifecycle test are synthetic scanner test inputs.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
Source & flagged code
8 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = npm run sync
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = npm run sync
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgtests/lifecycle-hooks.test.jsView file
66patternName = aws_access_key
severity = critical
line = 66
Critical
Critical Secret
Package contains a critical-looking secret pattern.
tests/lifecycle-hooks.test.jsView on unpkg · L66Findings
2 Critical4 High5 Medium4 Low
CriticalCritical Secrettests/lifecycle-hooks.test.js
CriticalSecret Patterntests/lifecycle-hooks.test.js
HighInstall Time Lifecycle Scriptspackage.json
HighExternal Ai Agent Control Surface Mutationscripts/universal-sync.js
HighTrigger Reachable External Ai Agent Control Surface Mutationport/mcp/server.js
HighPayload In Excluded Dir.cursor/skills/secure-cred-vault/scripts/install.sh
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helper.cursor/skills/secure-cred-vault/scripts/install.sh
MediumStructural Risk Force Deep Review
Low
Affected versions and remediation
This report applies to loragent@2.0.0.
See all versions of loragent for other recorded verdicts.
- Avoid installing loragent@2.0.0. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.