Loading npm security reports…

super-audit@0.4.0: AI-agent control-surface risk | LPM Firewall

registry / super-audit / 0.4.0

super-audit@0.4.0

Super Audit（SA）工程方法包安装器：自动探测已装宿主，将完整 assistant Skill 目录安装到宿主官方 Skill 目录

AI Security Review

scanned 16d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. On npm install, postinstall unconditionally runs the bundled installer with the install argument. That installer is described as probing several coding-agent hosts and writing a complete assistant skill directory into each host official skill directory.

Static reason

One or more suspicious static signals were detected.; source fingerprint signature matched known malicious package; routed for review

Trigger

Automatic npm postinstall during package installation.

Impact

Unconsented mutation of foreign coding-agent skill directories for Codex, Claude Code, OpenCode, and similar hosts, changing how those agents behave in later sessions.

Mechanism

bin/postinstall.js spawns bin/super-audit.js with install, and that shim executes the matching dist platform binary with the same arguments.

Policy narrative

Installing super-audit runs a postinstall script that launches the platform shim with install. The shim executes a bundled native binary and forwards that command. The package describes this install as detecting local coding agents and writing a full assistant skill set into their official skill directories. A dependency install therefore changes agent control files the user did not separately approve.

AI rationale

The install lifecycle unconditionally invokes an installer whose stated effect is writing skills into multiple third-party agent hosts. That is unconsented postinstall mutation of a broad AI-agent control surface.

Evidence

package.jsonbin/postinstall.jsbin/super-audit.jsREADME.md

Decision evidence

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.postinstall = node bin/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

9"scripts": { "postinstall": "node bin/postinstall.js" },

High

Suspicious Lifecycle Evidence

npm install runs postinstall, which executes node bin/postinstall.js with no user prompt.

package.jsonView on unpkg · L9

4"description": "Super Audit（SA）工程方法包安装器：自动探测已装宿主，将完整 assistant Skill 目录安装到宿主官方 Skill 目录",

High

Ai Review Evidence

Package metadata and README state that install detects Codex, Claude Code, and OpenCode and writes a full assistant skill tree into each host official skill directory.

package.jsonView on unpkg · L4

•scripts.postinstall = node bin/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/super-audit-linux-arm64View file

•path = dist/super-audit-linux-arm64 kind = native_binary sizeBytes = 8126648 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

dist/super-audit-linux-arm64View on unpkg

bin/super-audit.jsView file

•matchType = malicious_source_fingerprint_signature signature = 3049c6be2517fb7e signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = super-audit@0.3.0 matchedPath = bin/super-audit.js matchedIdentity = npm:c3VwZXItYXVkaXQ:0.3.0 similarity = 1.000 shingleOverlap = 2 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

bin/super-audit.jsView on unpkg

32const bin = path.join(__dirname, '..', 'dist', binaryName);

High

Ai Review Evidence

The shim selects a bundled platform binary and runs it with the forwarded arguments, so install reaches the opaque installer.

bin/super-audit.jsView on unpkg · L32

bin/postinstall.jsView file

7const shim = path.join(__dirname, 'super-audit.js'); const result = spawnSync(process.execPath, [shim, 'install'], { stdio: 'inherit', });

High

Suspicious Lifecycle Evidence

postinstall always spawns bin/super-audit.js with the install argument.

bin/postinstall.jsView on unpkg · L7