Loading npm security reports…

process-ai@0.12.0: AI-agent control-surface risk | LPM Firewall

registry / process-ai / 0.12.0

process-ai@0.12.0

Framework method-agnóstico de mapeamento de processos ponta-a-ponta — equipe de 9 agentes IA (Déa+Bento+Miguel+Júlia+Guilherme+Zanoni+Laura+Tiago+Monique) que conduz o usuário por Q&A até documentar o processo completo (ingestão documental→SIPOC→hierarqui

AI Security Review

scanned 4d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Installing the npm package automatically alters the consumer project's Claude Code control surface. It also installs Python dependencies without a separate user command.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

npm install process-ai

Impact

Adds behavior-bearing slash-command prompts to a foreign AI-agent project and performs install-time dependency changes.

Mechanism

postinstall-driven Claude skill injection and pip provisioning

Policy narrative

The package’s postinstall launches its CLI against INIT_CWD, the consumer project. The installer copies package-controlled SKILL.md files into that project's .claude/skills directory, making them agent-invocable slash commands, and also invokes pip to install requirements. This is an unconsented install-time mutation of a foreign AI-agent control surface, so it meets the firewall block boundary even though the copied paths are scoped and no credential theft was found.

Rationale

Source confirms an npm postinstall automatically injects package-controlled Claude Code skills into the consumer project and runs pip provisioning. This is concrete unconsented install-time mutation of a foreign AI-agent control surface.

Evidence

package.jsonbin/postinstall.jsdist/toolkit/adapters/claude-code/skill-copy.jsdist/toolkit/src/installer/orchestrator.jsdist/toolkit/src/installer/python-deps.jsdist/toolkit/src/installer/update-check.js.claude/skills/process-ai*/SKILL.md

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.postinstall = node bin/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node bin/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

scripts/docs-site/vendor/d3/7/d3.min.jsView file

1// https://d3js.org v7.9.0 Copyright 2010-2023 Mike Bostock L2: !function(t,n){"object"==typeof exports&&"undefined"!=typeof module?n(exports):"function"==typeof define&&define.amd?define(["exports"],n):n((t="undefined"!=typeof globalThis?globa...

Low

Eval

Package source references a known benign dynamic code generation pattern.

scripts/docs-site/vendor/d3/7/d3.min.jsView on unpkg · L1

dist/bin/process-ai.jsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 22

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/bin/process-ai.jsView on unpkg

396try { L397: return (await import(__rewriteRelativeImportExtension(pathToFileURL(scriptPath).href))); L398: }

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/bin/process-ai.jsView on unpkg · L396

dist/toolkit/adapters/claude-code/skill-copy.jsView file

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. let lstatprogress = targetprojectdir; for (const seg of path.relative(targetprojectdir, targetskilldir).split(path.sep).filter(boolean)) { lstatprogress = path.join(lstatprogress, seg); try { if ((await fs.lstat(lstatprogress)).issymboliclink()) { throw new error(`recusa: componente do caminho é um symlink (escaparia do escopo do alvo): ${lstatprogress}`); } } catch (e) { if (e.code !== 'enoent') throw e; } } await fs.mkdir(targetskilldir, { recursive: true }); try { const destlstat = aw

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/toolkit/adapters/claude-code/skill-copy.jsView on unpkg

scripts/ingest_csv.pyView file

•path = scripts/ingest_csv.py kind = build_helper sizeBytes = 4500 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/ingest_csv.pyView on unpkg

scripts/docs-site/vendor/mermaid/11.16.1/mermaid.min.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = process-ai@0.9.0 matchedIdentity = npm:cHJvY2Vzcy1haQ:0.9.0 similarity = 0.800 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

scripts/docs-site/vendor/mermaid/11.16.1/mermaid.min.jsView on unpkg

Source & flagged code

8 flagged

package.jsonView file

Lines 16-56json

16 "skills/",

17 "method-packs/",

18 "scripts/ingest_pdf.py",

19 "scripts/ingest_docx.py",

20 "scripts/ingest_pptx.py",

21 "scripts/ingest_xlsx.py",

22 "scripts/ingest_csv.py",

23 "scripts/ingest_xml.py",

24 "scripts/ingest_common.py",

25 "scripts/requirements-ingest.txt",

26 "scripts/bpmn-renderer/render.ts",

27 "scripts/bpmn-renderer/render.html",

28 "scripts/bpmn-renderer/playwright-probe.cjs",

29 "scripts/docs-site/",

30 "README.md",

31 "LICENSE"

32 ],

33 "scripts": {

34 "build": "tsc -p tsconfig.build.json && tsc -p tsconfig.scripts.json && node bin/copy-assets.cjs",

35 "prepublishOnly": "npm run build",

36 "postinstall": "node bin/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L36

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L36

37 "dev": "node bin/process-ai.ts",

38 "test": "node --test tests/*.test.ts",

39 "typecheck": "tsc --noEmit"

40 },

41 "keywords": [

42 "process-mapping",

43 "bpmn",

44 "sipoc",

45 "process-discovery",

46 "claude-code",

47 "agent-pipeline",

48 "hexagonal-architecture",

49 "business-process",

50 "pop",

51 "confidence-markers",

52 "document-ingestion",

53 "pdf-to-markdown",

54 "reference-material"

55 ],

56 "author": "Sandoval Medeiros",

scripts/docs-site/vendor/d3/7/d3.min.jsView file

Lines 1-3javascript

1// https://d3js.org v7.9.0 Copyright 2010-2023 Mike Bostock

2!function(t,n){"object"==typeof exports&&"undefined"!=typeof module?n(exports):"function"==typeof define&&

dist/bin/process-ai.jsView file

Lines 376-416javascript

376}

377/**

378 * Anexa `versionStatus` ao payload JSON de status/resume quando a versão em

379 * execução está defasada (behind). Campo ausente caso contrário → saída

380 * byte-idêntica à atual quando o framework está corrente. Isto põe o aviso de

381 * versão defasada no canal (stdout estruturado) que os agentes capturam, em vez

382 * do stderr (que o agente não repassa ao usuário final).

383 */

384function withVersionStatus(payload

dist/toolkit/adapters/claude-code/skill-copy.jsView file

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. let lstatprogress = targetprojectdir; for (const seg of path.relative(targetprojectdir, targetskilldir).split(path.sep).filter(boolean)) { lstatprogress = path.join(lstatprogress, seg); try { if ((await fs.lstat(lstatprogress)).issymboliclink()) { throw new error(`recusa: componente do caminho é um symlink (escaparia do escopo do alvo): ${lstatprogress}`); } } catch (e) { if (e.code !== 'enoent') throw e; } } await fs.mkdir(targetskilldir, { recursive: true }); try { const destlstat = aw

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/toolkit/adapters/claude-code/skill-copy.jsView on unpkg

scripts/ingest_csv.pyView file

•path = scripts/ingest_csv.py kind = build_helper sizeBytes = 4500 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/ingest_csv.pyView on unpkg

scripts/docs-site/vendor/mermaid/11.16.1/mermaid.min.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = process-ai@0.9.0 matchedIdentity = npm:cHJvY2Vzcy1haQ:0.9.0 similarity = 0.800 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

scripts/docs-site/vendor/mermaid/11.16.1/mermaid.min.jsView on unpkg