onemanagency@4.2.0: AI-agent control-surface risk | LPM Firewall

Loading npm security reports…

onemanagency@4.2.0: AI-agent control-surface risk | LPM Firewall

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node build/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node build/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/oma.jsView file

21const path = require('path'); L22: const { execSync } = require('child_process'); L23: const os = require('os');

High

Child Process

Package source references child process execution.

bin/oma.jsView on unpkg · L21

build/installer.jsView file

1Install-time code directly mutates a foreign AI-agent control surface: L60: const IDE_TARGETS = [ L61: { name: 'claude', parent: '.claude', skills: '.claude/skills' }, L62: { name: 'opencode', parent: '.opencode', skills: '.opencode/skills' }, L63: { name: 'codex', parent: '.codex', skills: '.codex/skills' }, L64: { name: 'cursor', parent: '.cursor', skills: '.cursor/skills' }, ... L85: if (!fs.existsSync(dest)) { L86: fs.mkdirSync(dest, { recursive: true }); L87: } ... L96: if (!overwrite && fs.existsSync(d)) continue; L97: fs.copyFileSync(s, d); L98: } ... L161: if (!fs.existsSync(EXTERNAL_DIR)) { Write operation from build/installer.js: L60: const IDE_TARGETS = [ L61: { name: 'claude', parent: '.claude', skills: '.claude/skills' }, L62: { name: 'opencode', parent: '.opencode', skills: '

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

build/installer.jsView on unpkg · L1

137console.log(`[external] installing global CLI ${cli.package}...`); L138: execSync(`npm install -g ${cli.package}`, { stdio: 'pipe', timeout: 120_000 }); L139: console.log(`[external] ✓ installed global CLI ${cli.package}`);

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

build/installer.jsView on unpkg · L137

install/install.shView file

•path = install/install.sh kind = build_helper sizeBytes = 3305 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

install/install.shView on unpkg

Source & flagged code

6 flagged

package.jsonView file

Lines 1-30json

1{

2 "name": "onemanagency",

3 "version": "4.2.0",

4 "description": "Sistema de execução de projetos via IA. OneManAgency - funciona em qualquer IDE e adapta-se a qualquer projeto.",

5 "main": "bin/oma.js",

6 "bin": {

7 "oma": "bin/oma.js"

8 },

9 "scripts": {

10 "postinstall": "node build/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L10

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L10

11 "test": "node --test tests/installer-cli.test.js"

12 },

13 "keywords": [

14 "ai",

15 "agency",

16 "workflow",

17 "claude",

18 "opencode",

19 "cursor",

20 "automation",

21 "landing-page",

22 "saas",

23 "scaffold"

24 ],

25 "author": "OneManAgency",

26 "license": "MIT",

27 "repository": {

28 "type": "git",

29 "url": "git+https://github.com/pauloarthurrocha/OneManAgency.git"

30 },

bin/oma.jsView file

Lines 1-41javascript

1#!/usr/bin/env node

2

3/**

4 * OneManAgency — CLI Global

5 *

6 * RESPONSABILIDADE: Gerenciar a instalacao GLOBAL do sistema.

7 * NAO cria projetos. Projetos sao criados pela skill oma-init dentro do IDE.

8 *

9 * Comandos:

10 * oma install Instala/atualiza recursos em ~/.oma/ + IDEs

11 * --only=<a,b,c> Instalar so em IDEs especificas (claude,cursor,codex,opencode,antigravity,gemini-cli)

build/installer.jsView file

Lines 1-21javascript

1const fs = require('fs');

2const path = require('path');

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

build/installer.jsView on unpkg · L1

3

install/install.shView file

•path = install/install.sh kind = build_helper sizeBytes = 3305 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

install/install.shView on unpkg