Loading npm security reports…

suppa-mcp-2@1.17.0: AI-agent control-surface risk | LPM Firewall

registry / suppa-mcp-2 / 1.17.0

suppa-mcp-2@1.17.0

MCP server for the Suppa platform (modern.suppa.me) — Tasks, Docs/Pages, Entities & Schema, Forms, Automations, and file attachments, with multi-tenant Google auth. Node port of PyPI suppa-mcp.

AI Security Review

scanned 3h ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Installing the package can alter the consumer project's AI-agent hooks and development controls. The writes occur without an explicit setup command.

Static reason

One or more suspicious static signals were detected.

Trigger

npm automatically runs postinstall in a project detected as a Suppa application.

Impact

It can control agent behavior and alter project instructions, commit hooks, CI files, and package scripts.

Mechanism

A lifecycle script invokes a project-mutating guard installer.

Policy narrative

On installation, the package uses postinstall to execute an installer in the consumer repository. When that repository is detected as a Suppa application, the installer writes Claude Code hooks, agent instruction files, a Git pre-commit hook, a CI include file, and a package script. This is an unconsented lifecycle mutation of a foreign AI-agent control surface and project configuration.

Rationale

The package performs broad consumer-project and AI-agent control-surface writes during postinstall. The conditional checks do not establish user consent for those automatic changes.

Evidence

package.jsonskills/suppa-entity-code/scripts/postinstall.mjsskills/suppa-entity-code/scripts/install-entity-code-guards.mjs.claude/settings.jsonAGENTS.mdCLAUDE.md.githooks/pre-commit.gitlab/suppa-schema-gate.yml

Decision evidence

Source & flagged code

4 flagged

package.jsonView file

Lines 7-47json

7 "suppa-mcp": "dist/bin.js",

8 "suppa-entity-guards": "skills/suppa-entity-code/scripts/install-entity-code-guards.mjs"

9 },

10 "main": "dist/bin.js",

11 "files": [

12 "dist",

13 "skills",

14 "README.md",

15 "LICENSE"

16 ],

17 "engines": {

18 "node": ">=18"

19 },

20 "scripts": {

21 "build": "tsc",

22 "clean": "node -e \"require('fs').rmSync('dist',{recursive:true,force:true})\"",

23 "rebuild": "npm run clean && npm run build",

24 "start": "node dist/bin.js",

25 "dev": "tsc --watch",

26 "test": "node scripts/check-version-literals.mjs && vitest run",

27 "postinstall": "node skills/suppa-entity-code/scripts/postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L27

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L27

28 "test:watch": "vitest",

29 "prepublishOnly": "npm run build && npm test",

30 "inspect": "npx @modelcontextprotocol/inspector node dist/bin.js",

31 "schema:gate": "node skills/suppa-entity-code/scripts/entity-code-guard.mjs --ci .",

32 "guards:install": "node skills/suppa-entity-code/scripts/install-entity-code-guards.mjs"

33 },

34 "keywords": [

35 "mcp",

36 "model-context-protocol",

37 "suppa",

38 "modern-expo",

39 "ai",

40 "llm",

41 "tools",

42 "claude",

43 "copilot",

44 "cursor"

45 ],

46 "license": "MIT",

47 "repository": {

dist/tools/entityCode.jsView file

Lines 61-101javascript

61 .split("\\$")

62 .join("$");

63 }

64 catch {

65 return "";

66 }

dist/version.jsView file

•Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior. dist/version.js: * node_modules holds; publishing a fix changes nothing until that client is import { mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs"; const REGISTRY_URL = `https://registry.npmjs.org/${PACKAGE_NAME}/latest`; writeFileSync(tmp, `${JSON.stringify(cache, null, 2)}\n`, "utf-8");

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

dist/version.jsView on unpkg