registry / smart-compaction / 0.3.1

smart-compaction@0.3.1

dsh plugin: a compact_now tool letting the model trigger compaction itself at a safe point, plus a context_status tool so it can check real token usage against its context window, instead of only the automatic token-threshold trigger.

AI Security Review

scanned 7d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Installation automatically changes foreign dsh agent preset configurations to load smart-compaction. The changes extend across matching local presets without explicit authorization.

Static reason

One or more suspicious static signals were detected.

Trigger

npm postinstall runs scripts/mount-into-presets.mjs.

Impact

Matching agents acquire the plugin's tools and automatic conversation compaction behavior through an installation-time configuration change.

Mechanism

The script enumerates local preset directories, inserts its plugin registration beside an existing compaction backend, and writes the modified configuration.

Policy narrative

Installing the package runs a script that locates the user's dsh presets and adds smart-compaction registrations to matching agent configurations. Existing-backend and duplicate checks restrict which files change, but do not establish consent to modify these foreign agent control surfaces. The inserted plugin can subsequently register tools and automatically compact conversation history.

AI rationale

The inspected postinstall performs unconsented mutation of foreign AI-agent preset configurations, meeting the supplied blocking rule. Its functional purpose and matching guards do not remove that concrete lifecycle behavior.

Evidence

package.jsonscripts/mount-into-presets.mjs.dsh.agent-presetsagent.cordis.yml

Decision evidence

public snapshot

smart-compaction@0.3.1

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code