Loading npm security reports…

nanocorp@0.3.0: AI-agent control-surface risk | LPM Firewall

registry / nanocorp / 0.3.0

nanocorp@0.3.0

NanoCorp CLI: create and run your autonomous company from the terminal.

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Installing the package automatically invokes a native CLI to install and overwrite agent skills across several third-party coding-agent directories. No network endpoint is needed for this control-surface mutation.

Static reason

One or more suspicious static signals were detected.

Trigger

npm postinstall when NANOCORP_NO_AGENT_SKILLS is not set and a supported agent directory exists.

Impact

Injected or replaced skills can influence the behavior of installed coding agents without an explicit setup command.

Mechanism

Automatic native-binary installation of agent skill files into foreign agent directories.

Policy narrative

During npm installation, postinstall starts the package launcher with skills install. The launcher executes a vendored native binary. Embedded binary text and the package documentation show that this command installs and overwrites NanoCorp skill files in existing Claude Code, Codex, Cursor, Gemini CLI, GitHub Copilot, and vendor-neutral agent directories. The mutation occurs automatically unless the user set an opt-out environment variable beforehand, creating an unconsented broad AI-agent control-surface write.

AI rationale

This is a concrete automatic postinstall mutation of foreign and broad AI-agent control surfaces. The opt-out does not establish affirmative consent for the lifecycle action.

Evidence

package.jsonscripts/postinstall.jsbin/nanocorp.jsvendor/nanocorp-linux-arm64README.md~/.claude/skills/~/.codex/skills/~/.cursor/skills/~/.gemini/skills/

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

15"scripts": { "postinstall": "node scripts/postinstall.js", "test": "node --test" }

High

Suspicious Lifecycle Evidence

The package declares an automatic postinstall hook.

package.jsonView on unpkg · L15

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

vendor/nanocorp-darwin-arm64View file

•path = vendor/nanocorp-darwin-arm64 kind = native_binary sizeBytes = 7363314 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

vendor/nanocorp-darwin-arm64View on unpkg

scripts/postinstall.jsView file

9if (!process.env.NANOCORP_NO_AGENT_SKILLS) { const { spawnSync } = require("node:child_process"); const { join } = require("node:path"); spawnSync( process.execPath, [join(__dirname, "..", "bin", "nanocorp.js"), "skills", "install", "--quiet"], { stdio: "ignore", timeout: 15000 } );

High

Ai Review Evidence

The hook launches the vendored CLI with the skills install command unless an opt-out variable is already set.

scripts/postinstall.jsView on unpkg · L9

bin/nanocorp.jsView file

16const bin = join(__dirname, "..", "vendor", name); try { fs.chmodSync(bin, 0o755); } catch { /* best effort: npm does not reliably preserve +x on vendored files */ } const res = spawnSync(bin, process.argv.slice(2), { stdio: "inherit" });

High

Ai Review Evidence

The launcher executes a native binary, and its embedded text says it overwrites skill copies in several unrelated coding-agent directories.

bin/nanocorp.jsView on unpkg · L16

vendor/nanocorp-linux-arm64View file

9845Writes the embedded nanocorp-* skills into the skill directories of any supported coding agent you already have (Claude Code, Codex, Cursor, Gemini CLI, GitHub Copilot, and the vendor-neutral ~/.agents dir). It never creates those directories, overwrites existing copies so re-running refreshes them, and skips silently when no agent is found. Set NANOCORP_NO_AGENT_SKILLS to disable. install.sh runs this automatically.

High

Ai Review Evidence

The launcher executes a native binary, and its embedded text says it overwrites skill copies in several unrelated coding-agent directories.

vendor/nanocorp-linux-arm64View on unpkg · L9845

Source & flagged code

7 flagged

package.jsonView file

Lines 1-35json

1{

2 "name": "nanocorp",

3 "version": "0.3.0",

4 "description": "NanoCorp CLI: create and run your autonomous company from the terminal.",

5 "homepage": "https://nanocorp.so",

6 "bin": {

7 "nanocorp": "bin/nanocorp.js"

8 },

9 "files": [

10 "bin/",

11 "vendor/",

12 "scripts/",

13 "README.md"

14 ],

15 "scripts": {

16 "postinstall": "node scripts/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L16

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L16

17 "test": "node --test"

18 },

High

Suspicious Lifecycle Evidence

The package declares an automatic postinstall hook.

package.jsonView on unpkg · L15

19 "os": [

20 "darwin",

21 "linux"

22 ],

23 "cpu": [

24 "x64",

25 "arm64"

26 ],

27 "engines": {

28 "node": ">=18"

29 },

30 "license": "UNLICENSED",

31 "publishConfig": {

32 "access": "public"

33 }

34}

35

vendor/nanocorp-darwin-arm64View file

•path = vendor/nanocorp-darwin-arm64 kind = native_binary sizeBytes = 7363314 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

vendor/nanocorp-darwin-arm64View on unpkg

scripts/postinstall.jsView file

Lines 1-22javascript

1#!/usr/bin/env node

2"use strict";

3// Best-effort: install the bundled NanoCorp agent skills into a coding agent's

4// skill directories (the same thing install.sh does for the team channel). The

5// CLI honors NANOCORP_NO_AGENT_SKILLS and no-ops when no agent dir is present, so

6// this never fails the npm install. When this hook is skipped (--ignore-scripts,

7// pnpm, ...), the CLI installs them on first run instead (see cmd/root.go).

8try {

9 if (

bin/nanocorp.jsView file

Lines 1-28javascript

1#!/usr/bin/env node

2"use strict";

3const { spawnSync } = require("node:child_process");

4const { join } = require("node:path");

5const

vendor/nanocorp-linux-arm64View file

9845Writes the embedded nanocorp-* skills into the skill directories of any supported coding agent you already have (Claude Code, Codex, Cursor, Gemini CLI, GitHub Copilot, and the vendor-neutral ~/.agents dir). It never creates those directories, overwrites existing copies so re-running refreshes them, and skips silently when no agent is found. Set NANOCORP_NO_AGENT_SKILLS to disable. install.sh runs this automatically.

High

Ai Review Evidence

The launcher executes a native binary, and its embedded text says it overwrites skill copies in several unrelated coding-agent directories.

vendor/nanocorp-linux-arm64View on unpkg · L9845