Loading npm security reports…

process-ai@0.11.0: AI-agent control-surface risk | LPM Firewall

registry / process-ai / 0.11.0

process-ai@0.11.0

Framework method-agnóstico de mapeamento de processos ponta-a-ponta — equipe de 9 agentes IA (Déa+Bento+Miguel+Júlia+Guilherme+Zanoni+Laura+Tiago+Monique) que conduz o usuário por Q&A até documentar o processo completo (ingestão documental→SIPOC→hierarqui

AI Security Review

scanned 4d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. npm postinstall invokes the installer in the consumer project. It installs Claude Code skills and provisions Python dependencies without consent.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

npm install process-ai

Impact

Mutates a foreign AI-agent control surface and installs external Python dependencies at install time.

Mechanism

postinstall-driven Claude Code skill registration and pip dependency installation

Policy narrative

Installing the package triggers postinstall, which runs its CLI against INIT_CWD. The installer copies package-controlled SKILL.md files into the consumer project's .claude/skills path, causing Claude Code to load new slash-command behavior without an explicit setup command. The same path invokes python -m pip install -r requirements-ingest.txt. This is an unconsented install-time mutation of a foreign AI-agent control surface.

Rationale

Source confirms an unguarded npm postinstall mutates Claude Code configuration in the consumer project and runs pip installation. This meets the install-control-surface block policy despite no observed credential exfiltration.

Evidence

package.jsonbin/postinstall.jsdist/toolkit/adapters/claude-code/skill-copy.jsdist/toolkit/src/installer/orchestrator.jsdist/toolkit/src/installer/python-deps.jsdist/bin/process-ai.js.claude/skills/process-ai*/SKILL.md.process-ai/config

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.postinstall = node bin/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node bin/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

scripts/docs-site/vendor/d3/7/d3.min.jsView file

1// https://d3js.org v7.9.0 Copyright 2010-2023 Mike Bostock L2: !function(t,n){"object"==typeof exports&&"undefined"!=typeof module?n(exports):"function"==typeof define&&define.amd?define(["exports"],n):n((t="undefined"!=typeof globalThis?globa...

Low

Eval

Package source references a known benign dynamic code generation pattern.

scripts/docs-site/vendor/d3/7/d3.min.jsView on unpkg · L1

dist/bin/process-ai.jsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 21

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/bin/process-ai.jsView on unpkg

396try { L397: return (await import(__rewriteRelativeImportExtension(pathToFileURL(scriptPath).href))); L398: }

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/bin/process-ai.jsView on unpkg · L396

dist/toolkit/adapters/claude-code/skill-copy.jsView file

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. let lstatprogress = targetprojectdir; for (const seg of path.relative(targetprojectdir, targetskilldir).split(path.sep).filter(boolean)) { lstatprogress = path.join(lstatprogress, seg); try { if ((await fs.lstat(lstatprogress)).issymboliclink()) { throw new error(`recusa: componente do caminho é um symlink (escaparia do escopo do alvo): ${lstatprogress}`); } } catch (e) { if (e.code !== 'enoent') throw e; } } await fs.mkdir(targetskilldir, { recursive: true }); try { const destlstat = aw

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/toolkit/adapters/claude-code/skill-copy.jsView on unpkg

scripts/ingest_csv.pyView file

•path = scripts/ingest_csv.py kind = build_helper sizeBytes = 4500 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/ingest_csv.pyView on unpkg

scripts/docs-site/vendor/echarts/5.5.0/echarts.min.jsView file

•matchType = normalized_sha256 matchedPackage = process-ai@0.12.0 matchedPath = scripts/docs-site/vendor/echarts/5.5.0/echarts.min.js matchedIdentity = npm:cHJvY2Vzcy1haQ:0.12.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/docs-site/vendor/echarts/5.5.0/echarts.min.jsView on unpkg

Source & flagged code

8 flagged

package.jsonView file

Lines 16-56json

16 "skills/",

17 "method-packs/",

18 "scripts/ingest_pdf.py",

19 "scripts/ingest_docx.py",

20 "scripts/ingest_pptx.py",

21 "scripts/ingest_xlsx.py",

22 "scripts/ingest_csv.py",

23 "scripts/ingest_xml.py",

24 "scripts/ingest_common.py",

25 "scripts/requirements-ingest.txt",

26 "scripts/bpmn-renderer/render.ts",

27 "scripts/bpmn-renderer/render.html",

28 "scripts/bpmn-renderer/playwright-probe.cjs",

29 "scripts/docs-site/",

30 "README.md",

31 "LICENSE"

32 ],

33 "scripts": {

34 "build": "tsc -p tsconfig.build.json && tsc -p tsconfig.scripts.json && node bin/copy-assets.cjs",

35 "prepublishOnly": "npm run build",

36 "postinstall": "node bin/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L36

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L36

37 "dev": "node bin/process-ai.ts",

38 "test": "node --test tests/*.test.ts",

39 "typecheck": "tsc --noEmit"

40 },

41 "keywords": [

42 "process-mapping",

43 "bpmn",

44 "sipoc",

45 "process-discovery",

46 "claude-code",

47 "agent-pipeline",

48 "hexagonal-architecture",

49 "business-process",

50 "pop",

51 "confidence-markers",

52 "document-ingestion",

53 "pdf-to-markdown",

54 "reference-material"

55 ],

56 "author": "Sandoval Medeiros",

scripts/docs-site/vendor/d3/7/d3.min.jsView file

Lines 1-3javascript

1// https://d3js.org v7.9.0 Copyright 2010-2023 Mike Bostock

2!function(t,n){"object"==typeof exports&&"undefined"!=typeof module?n(exports):"function"==typeof define&&

dist/bin/process-ai.jsView file

Lines 376-416javascript

376}

377/**

378 * Anexa `versionStatus` ao payload JSON de status/resume quando a versão em

379 * execução está defasada (behind). Campo ausente caso contrário → saída

380 * byte-idêntica à atual quando o framework está corrente. Isto põe o aviso de

381 * versão defasada no canal (stdout estruturado) que os agentes capturam, em vez

382 * do stderr (que o agente não repassa ao usuário final).

383 */

384function withVersionStatus(payload

dist/toolkit/adapters/claude-code/skill-copy.jsView file

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. let lstatprogress = targetprojectdir; for (const seg of path.relative(targetprojectdir, targetskilldir).split(path.sep).filter(boolean)) { lstatprogress = path.join(lstatprogress, seg); try { if ((await fs.lstat(lstatprogress)).issymboliclink()) { throw new error(`recusa: componente do caminho é um symlink (escaparia do escopo do alvo): ${lstatprogress}`); } } catch (e) { if (e.code !== 'enoent') throw e; } } await fs.mkdir(targetskilldir, { recursive: true }); try { const destlstat = aw

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/toolkit/adapters/claude-code/skill-copy.jsView on unpkg

scripts/ingest_csv.pyView file

•path = scripts/ingest_csv.py kind = build_helper sizeBytes = 4500 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/ingest_csv.pyView on unpkg

scripts/docs-site/vendor/echarts/5.5.0/echarts.min.jsView file

•matchType = normalized_sha256 matchedPackage = process-ai@0.12.0 matchedPath = scripts/docs-site/vendor/echarts/5.5.0/echarts.min.js matchedIdentity = npm:cHJvY2Vzcy1haQ:0.12.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/docs-site/vendor/echarts/5.5.0/echarts.min.jsView on unpkg