redsea-cli@0.2.2: AI-agent control-surface risk | LPM Firewall

Loading npm security reports…

redsea-cli@0.2.2: AI-agent control-surface risk | LPM Firewall

Source & flagged code

5 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/commands/skill.jsView file

2Install-time code directly mutates a foreign AI-agent control surface: L2: // 默认全局安装(装一次,所有项目、所有智能体可用),覆盖三个通用技能目录: L3: // ~/.agents/skills/<技能名>/ 跨智能体通用技能目录(飞书 CLI 等同类工具也装在这里) L4: // ~/.claude/skills/<技能名>/ Claude Code 用户级技能 L5: // ~/.codex/skills/<技能名>/ Codex 用户级技能 L6: // 升级 CLI 后重新执行 redsea skill install 即可原地更新 ... L18: const target = path.join(dir, file.relativePath); L19: fs.mkdirSync(path.dirname(target), { recursive: true }); L20: fs.writeFileSync(target, file.content); L21: console.log(`已写入 ${target}`); ... L29: } L30: // 追加/更新当前项目的 AGENTS.md(用标记块支持重复安装时原地覆盖) L31: function installAgentsMd() { Write operation from dist/config.js: L60: } L61: fs.mkdirSync(CONFIG_DIR, { recursive: true }); L62: const f = readUserFile(CONFIG_FILE); L63: f.env = name; L64: fs.writeFile

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

dist/commands/skill.jsView on unpkg · L2

•Runtime or CLI code links a write operation to an explicit external AI-agent control path: in(legacy, 'skill.md'))) { fs.rmsync(legacy, { recursive: true, force: true }); console.log(`已清理旧版单技能目录 ${legacy}`); } } function installagentsmd() { const file = 'agents.md'; const start = ''; const end = ''; const block = `${start}\n${agentssnippet()}${end}`; const existing = fs.existssync(file) ? fs.readfilesync(file, 'utf8') : ''; if (existing.includes(start) && existing.includes(end)) { const updated = existing.slice(0, existing.indexof(start)) + block + existing.slice(existing.indexof(end) + end.length);

High

External Ai Agent Control Surface Mutation

Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/commands/skill.jsView on unpkg

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. irsync(path.dirname(target), { recursive: true }); fs.writefilesync(target, file.content); console.log(`已写入 ${target}`); } } const legacy = path.join(skillsroot, 'redsea'); if (fs.existssync(path.join(legacy, 'skill.md'))) { fs.rmsync(legacy, { recursive: true, force: true }); console.log(`已清理旧版单技能目录 ${legacy}`); } } function installagentsmd() { const file = 'agents.md'; const start = ''; const end = ''; const block = `${start}\n${agentssnippet()}${end}`; const

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/commands/skill.jsView on unpkg