sav-agent-skills@1.0.1: AI-agent control-surface risk | LPM Firewall

Loading npm security reports…

sav-agent-skills@1.0.1: AI-agent control-surface risk | LPM Firewall

Source & flagged code

5 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

scripts/postinstall.jsView file

47L48: // 4. 复制并注入选中的 SKILL.md 到目标项目的 .claude/skills 和 .agents/skills 目录 L49: targetSkillFolders.forEach(skillName => { ... L53: L54: const claudeSkillDir = path.join(targetProjectDir, '.claude', 'skills', skillName); L55: const agentsSkillDir = path.join(targetProjectDir, '.agents', 'skills', skillName); L56: const cursorSkillDir = path.join(targetProjectDir, '.cursor', 'skills', skillName); ... L58: [claudeSkillDir, agentsSkillDir, cursorSkillDir].forEach(dir => { L59: fs.mkdirSync(dir, { recursive: true }); L60: fs.writeFileSync(path.join(dir, 'SKILL.md'), skillContent, 'utf-8'); L61: });

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/postinstall.jsView on unpkg · L47

dist/index.jsView file

•Runtime or CLI code links a write operation to an explicit external AI-agent control path: }] ${item.desc}`); }); console.log(` [${platform_enums.length + 1}] 手动输入其他自定义 platform 名称`); rl.question(`\n👉 请输入序号 (默认 1 [emp]): `, (answer) => { rl.close(); const trimmed = answer.trim(); if (!trimmed) { resolve('emp'); return; } const num = parseint(trimmed, 10); if (!isnan(num) && num >= 1 && num <= platform_enums.length) { resolve(platform_enums[num - 1].code); } else if (num === platform_enums.length + 1) { const rl2 = readline.createinterface({ input: process.stdin, outpu

High

External Ai Agent Control Surface Mutation

Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/index.jsView on unpkg

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. input: process.stdin, output: process.stdout }); rl2.question('👉 请输入 json 文件相对或绝对路径: ', (custompath) => { rl2.close(); resolve(custompath.trim() || candidates[0]); }); } else { console.log(`⚠️ 输入无效，自动选择默认选项: ${candidates[0]}`); resolve(candidates[0]); } }); }); } async function promptselectplatform() { const rl = readline.createinterface({ input: process.stdin, output: process.stdout }); return new promise((resolve) => { console.log('\n🏷️ 请选择要同步的目标 platform

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/index.js

Source & flagged code

5 flagged

package.jsonView file

Lines 8-48json

8 },

9 "main": "dist/index.js",

10 "types": "dist/index.d.ts",

11 "bin": {

12 "language-sync": "dist/index.js",

13 "update-lang": "src/updateLanguage.js"

14 },

15 "files": [

16 "dist",

17 "skills",

18 "scripts",

19 "src",

20 "README.md"

21 ],

22 "scripts": {

23 "build": "tsc",

24 "dev": "ts-node src/index.ts",

25 "start": "node dist/index.js",

26 "update-lang": "node src/updateLanguage.js",

27 "prepare": "npm run build",

28 "postinstall": "node scripts/postinstall.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L28

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L28

29 },

30 "keywords": [

31 "agent",

32 "skills",

33 "i18n",

34 "language",

35 "sync"

36 ],

37 "author": "",

38 "license": "ISC",

39 "dependencies": {

40 "axios": "^1.7.9",

41 "commander": "^12.1.0"

42 },

43 "devDependencies": {

44 "@types/node": "^20.14.0",

45 "ts-node": "^10.9.2",

46 "typescript": "^5.4.5"

47 }

48}

scripts/postinstall.jsView file

Lines 27-67javascript

27 try {

28 const hostPkg = JSON.parse(fs.readFileSync(hostPackageJsonPath, 'utf-8'));

29 if (hostPkg.savAgent && Array.isArray(hostPkg.savAgent.skills)) {

dist/index.jsView file

•Runtime or CLI code links a write operation to an explicit external AI-agent control path: }] ${item.desc}`); }); console.log(` [${platform_enums.length + 1}] 手动输入其他自定义 platform 名称`); rl.question(`\n👉 请输入序号 (默认 1 [emp]): `, (answer) => { rl.close(); const trimmed = answer.trim(); if (!trimmed) { resolve('emp'); return; } const num = parseint(trimmed, 10); if (!isnan(num) && num >= 1 && num <= platform_enums.length) { resolve(platform_enums[num - 1].code); } else if (num === platform_enums.length + 1) { const rl2 = readline.createinterface({ input: process.stdin, outpu

High

External Ai Agent Control Surface Mutation

Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/index.jsView on unpkg

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. input: process.stdin, output: process.stdout }); rl2.question('👉 请输入 json 文件相对或绝对路径: ', (custompath) => { rl2.close(); resolve(custompath.trim() || candidates[0]); }); } else { console.log(`⚠️ 输入无效，自动选择默认选项: ${candidates[0]}`); resolve(candidates[0]); } }); }); } async function promptselectplatform() { const rl = readline.createinterface({ input: process.stdin, output: process.stdout }); return new promise((resolve) => { console.log('\n🏷️ 请选择要同步的目标 platform

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/index.js