respecpow@0.9.5
Spec-Powered AI Development Framework - 融合 OpenSpec 规范驱动 + Superpowers 执行引擎的企业级 AI 辅助编程框架（安装即生效版）
AI Security Review
scanned 12d ago · by lpm-firewall-aiThe install lifecycle performs an unconsented write to global AI-agent control settings and installs recurring commands. This meets the policy for blocking install-time AI-agent control-surface mutation.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Installing the package through npm runs its postinstall script.
Impact
The package gains recurring execution within external AI-agent workflows.
Mechanism
The script detects existing agent settings, appends hooks that invoke this package, and writes the updated settings without requesting consent.
Policy narrative
The manifest activates a postinstall script that checks for global Claude Code and CodeBuddy settings and adds hooks that invoke respecpow during agent events. The script writes those settings without a consent prompt, creating an unconsented AI-agent control surface.
AI rationale
The install lifecycle performs an unconsented write to global AI-agent control settings and installs recurring commands. This meets the policy for blocking install-time AI-agent control-surface mutation.
Evidence
package.jsonscripts/postinstall.js~/.claude/settings.json~/.codebuddy/settings.json
Decision evidence
public snapshotAI identified this as a dangerous AI-agent capability at 98.0% confidence with low false-positive risk.
Evidence for policy risk
- The package manifest runs a postinstall script during installation.
- That script modifies global Claude Code and CodeBuddy settings when those tools are present, without a consent prompt.
- The script adds commands that run this package on agent session, prompt, and tool events.
- The named init and update paths concern project-level setup or artifact refresh; the separate CodeGraph installer is reached through initialization.
- The install hook is active package behavior, not an inert payload.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemShell
HighEntropyStrings
Source & flagged code
8 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/postinstall.js || echo 'Postinstall skipped'
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.js || echo 'Postinstall skipped'
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/core/init/codegraph-step.jsView file
11*/
L12: import { execSync } from 'child_process';
L13: // ============================================================
High
Child Process
Package source references child process execution.
dist/core/init/codegraph-step.jsView on unpkg · L11Findings
1 Critical6 High3 Medium5 Low
CriticalAi Agent Control Hijackscripts/postinstall.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/core/init/codegraph-step.js
HighShell
HighTrigger Reachable External Ai Agent Control Surface Mutationdist/core/init/engine.js
HighRuntime Package Installdist/core/init/codegraph-step.js
HighSemantic Analysis Limiteddist/core/init/engine.js#virtual:normalized:round1
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
Low
Affected versions and remediation
This report applies to respecpow@0.9.5.
See all versions of respecpow for other recorded verdicts.
- Avoid installing respecpow@0.9.5. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.