Loading npm security reports…

process-ai@0.12.1: Suspicious npm security report (Warn) | LPM Firewall

registry / process-ai / 0.12.1

process-ai@0.12.1

Framework method-agnóstico de mapeamento de processos ponta-a-ponta — equipe de 9 agentes IA (Déa+Bento+Miguel+Júlia+Guilherme+Zanoni+Laura+Tiago+Monique) que conduz o usuário por Q&A até documentar o processo completo (ingestão documental→SIPOC→hierarqui

AI Security Review

scanned 4d ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. Installation automatically provisions this package's Claude Code skills and project files. It also invokes pip for its declared document-ingestion dependencies and checks the package's npm version.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

npm install process-ai@0.12.1 executes postinstall.

Impact

Adds package-owned agent instructions to the target project and may install Python dependencies; no confirmed exfiltration or foreign/broad agent-control takeover.

Mechanism

First-party Claude Code skill setup plus dependency bootstrap.

Rationale

This is a real install-time, first-party agent-extension lifecycle risk and warrants a warning. The inspected source scopes writes to package-owned paths and shows no concrete malicious chain, so blocking is not justified.

Evidence

package.jsonbin/postinstall.jsdist/toolkit/src/installer/orchestrator.jsdist/toolkit/adapters/claude-code/skill-copy.jsdist/toolkit/src/installer/python-deps.jsdist/toolkit/src/installer/update-check.js.claude/skills/process-ai*/SKILL.md.process-ai/config.process-ai/config.user.process-ai/install-manifest.tomlmethod-packs/scripts/requirements-ingest.txt

Source & flagged code

9 flagged · loading source

package.jsonView file

•scripts.postinstall = node bin/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node bin/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

scripts/docs-site/vendor/d3/7/d3.min.jsView file

1// https://d3js.org v7.9.0 Copyright 2010-2023 Mike Bostock L2: !function(t,n){"object"==typeof exports&&"undefined"!=typeof module?n(exports):"function"==typeof define&&define.amd?define(["exports"],n):n((t="undefined"!=typeof globalThis?globa...

Low

Eval

Package source references a known benign dynamic code generation pattern.

scripts/docs-site/vendor/d3/7/d3.min.jsView on unpkg · L1

dist/bin/process-ai.jsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 22

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/bin/process-ai.jsView on unpkg

396try { L397: return (await import(__rewriteRelativeImportExtension(pathToFileURL(scriptPath).href))); L398: }

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/bin/process-ai.jsView on unpkg · L396

dist/toolkit/adapters/claude-code/skill-copy.jsView file

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. let lstatprogress = targetprojectdir; for (const seg of path.relative(targetprojectdir, targetskilldir).split(path.sep).filter(boolean)) { lstatprogress = path.join(lstatprogress, seg); try { if ((await fs.lstat(lstatprogress)).issymboliclink()) { throw new error(`recusa: componente do caminho é um symlink (escaparia do escopo do alvo): ${lstatprogress}`); } } catch (e) { if (e.code !== 'enoent') throw e; } } await fs.mkdir(targetskilldir, { recursive: true }); try { const destlstat = aw

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/toolkit/adapters/claude-code/skill-copy.jsView on unpkg

scripts/ingest_csv.pyView file

•path = scripts/ingest_csv.py kind = build_helper sizeBytes = 4500 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/ingest_csv.pyView on unpkg

scripts/docs-site/vendor/mermaid/11.16.1/mermaid.min.jsView file

•matchType = normalized_sha256 matchedPackage = process-ai@0.12.0 matchedPath = scripts/docs-site/vendor/mermaid/11.16.1/mermaid.min.js matchedIdentity = npm:cHJvY2Vzcy1haQ:0.12.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/docs-site/vendor/mermaid/11.16.1/mermaid.min.jsView on unpkg

scripts/docs-site/vendor/echarts/5.5.0/echarts.min.jsView file

•matchType = normalized_sha256 matchedPackage = process-ai@0.12.0 matchedPath = scripts/docs-site/vendor/echarts/5.5.0/echarts.min.js matchedIdentity = npm:cHJvY2Vzcy1haQ:0.12.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/docs-site/vendor/echarts/5.5.0/echarts.min.jsView on unpkg

Source & flagged code

9 flagged

package.jsonView file

Lines 16-56json

16 "skills/",

17 "method-packs/",

18 "scripts/ingest_pdf.py",

19 "scripts/ingest_docx.py",

20 "scripts/ingest_pptx.py",

21 "scripts/ingest_xlsx.py",

22 "scripts/ingest_csv.py",

23 "scripts/ingest_xml.py",

24 "scripts/ingest_common.py",

25 "scripts/requirements-ingest.txt",

26 "scripts/bpmn-renderer/render.ts",

27 "scripts/bpmn-renderer/render.html",

28 "scripts/bpmn-renderer/playwright-probe.cjs",

29 "scripts/docs-site/",

30 "README.md",

31 "LICENSE"

32 ],

33 "scripts": {

34 "build": "tsc -p tsconfig.build.json && tsc -p tsconfig.scripts.json && node bin/copy-assets.cjs",

35 "prepublishOnly": "npm run build",

36 "postinstall": "node bin/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L36

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L36

37 "dev": "node bin/process-ai.ts",

38 "test": "node --test tests/*.test.ts",

39 "typecheck": "tsc --noEmit"

40 },

41 "keywords": [

42 "process-mapping",

43 "bpmn",

44 "sipoc",

45 "process-discovery",

46 "claude-code",

47 "agent-pipeline",

48 "hexagonal-architecture",

49 "business-process",

50 "pop",

51 "confidence-markers",

52 "document-ingestion",

53 "pdf-to-markdown",

54 "reference-material"

55 ],

56 "author": "Sandoval Medeiros",

scripts/docs-site/vendor/d3/7/d3.min.jsView file

Lines 1-3javascript

1// https://d3js.org v7.9.0 Copyright 2010-2023 Mike Bostock

2!function(t,n){"object"==typeof exports&&"undefined"!=typeof module?n(exports):"function"==typeof define&&

dist/bin/process-ai.jsView file

Lines 376-416javascript

376}

377/**

378 * Anexa `versionStatus` ao payload JSON de status/resume quando a versão em

379 * execução está defasada (behind). Campo ausente caso contrário → saída

380 * byte-idêntica à atual quando o framework está corrente. Isto põe o aviso de

381 * versão defasada no canal (stdout estruturado) que os agentes capturam, em vez

382 * do stderr (que o agente não repassa ao usuário final).

383 */

384function withVersionStatus(payload

dist/toolkit/adapters/claude-code/skill-copy.jsView file

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. let lstatprogress = targetprojectdir; for (const seg of path.relative(targetprojectdir, targetskilldir).split(path.sep).filter(boolean)) { lstatprogress = path.join(lstatprogress, seg); try { if ((await fs.lstat(lstatprogress)).issymboliclink()) { throw new error(`recusa: componente do caminho é um symlink (escaparia do escopo do alvo): ${lstatprogress}`); } } catch (e) { if (e.code !== 'enoent') throw e; } } await fs.mkdir(targetskilldir, { recursive: true }); try { const destlstat = aw

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/toolkit/adapters/claude-code/skill-copy.jsView on unpkg

scripts/ingest_csv.pyView file

•path = scripts/ingest_csv.py kind = build_helper sizeBytes = 4500 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/ingest_csv.pyView on unpkg

scripts/docs-site/vendor/mermaid/11.16.1/mermaid.min.jsView file

•matchType = normalized_sha256 matchedPackage = process-ai@0.12.0 matchedPath = scripts/docs-site/vendor/mermaid/11.16.1/mermaid.min.js matchedIdentity = npm:cHJvY2Vzcy1haQ:0.12.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/docs-site/vendor/mermaid/11.16.1/mermaid.min.jsView on unpkg

scripts/docs-site/vendor/echarts/5.5.0/echarts.min.jsView file

•matchType = normalized_sha256 matchedPackage = process-ai@0.12.0 matchedPath = scripts/docs-site/vendor/echarts/5.5.0/echarts.min.js matchedIdentity = npm:cHJvY2Vzcy1haQ:0.12.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/docs-site/vendor/echarts/5.5.0/echarts.min.jsView on unpkg