surf-agent-skill@8.0.1

⚠ Under review

Autonomous web research for AI coding agents, on Brave Search and nothing else. The CLI runs the whole loop: an LLM (DeepSeek v4 Pro via OpenRouter) plans the queries, up to --sub-agents of them run at once against Brave — paced to your plan's real rate l

Static Scan Results

scanned 2mo ago · by rust-scanner

Static analysis flagged 12 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 42 file(s), 310 KB of source, external domains: api-dashboard.search.brave.com, api.search.brave.com, github.com, openrouter.ai

Source & flagged code

4 flagged

package.jsonView file

Lines 14-54json

14 },

15 "bin": {

16 "surf": "./bin/surf.mjs",

17 "surf-research-skill": "./bin/surf-research-skill.mjs",

18 "surf-search-normal": "./bin/surf-search-normal.mjs",

19 "surf-search-unlimit": "./bin/surf-search-unlimit.mjs",

20 "surf-plan-skill": "./bin/surf-plan-skill.mjs"

21 },

22 "files": [

23 "bin/",

24 "src/",

25 "skills/",

26 "references/",

27 "SKILL.md",

28 "README.md",

29 "CHANGELOG.md",

30 "LICENSE",

31 "logo.png"

32 ],

33 "scripts": {

34 "postinstall": "node ./src/install/postinstall.mjs || true",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L34

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L34

35 "preuninstall": "node ./src/install/preuninstall.mjs || true",

36 "build": "npm run test:syntax",

37 "predev": "npm run build",

38 "dev": "node ./bin/surf.mjs",

39 "predev:search": "npm run build",

40 "dev:search": "node ./bin/surf-research-skill.mjs",

41 "predev:plan": "npm run build",

42 "dev:plan": "node ./bin/surf-plan-skill.mjs",

43 "predev:ai": "npm run build",

44 "dev:ai": "node ./bin/surf-search-normal.mjs",

45 "predev:ai-unlimit": "npm run build",

46 "dev:ai-unlimit": "node ./bin/surf-search-unlimit.mjs",

47 "predev:install": "npm run build",

48 "dev:install": "SURF_DEV=1 node ./src/install/postinstall.mjs",

49 "dev:uninstall": "SURF_DEV=1 node ./src/install/preuninstall.mjs",

50 "test": "npm run test:syntax && node ./test/smoke.mjs && node ./test/brave.mjs",

51 "test:syntax": "for f in bin/*.mjs src/index.mjs src/env.mjs src/install/*.mjs src/lib/*.mjs src/lib/ai/*.mjs src/lib/providers/*.mjs src/lib/api/*.mjs src/plan/*.mjs src/validators/*.mjs; do node --check \"$f\" || exit 1; done && echo syntax-ok"

52 },

53 "engines": {

54 "node": ">=18"

src/lib/harness-install.mjsView file

Lines 1-24javascript

1// Cross-OS skill registration helpers used by postinstall / preuninstall.

2//

3// Strategy:

4// - Symlink the package root into each harness's skill dir

5// (~/.claude/skills/<skill-name>, ~/.agents/skills/<skill-name>, etc.)

6// - On Windows: try fs.symlink with type='junction' first (no admin needed

7// for directories). If EPERM/ENOSYS, fall back to recursive copy.

8// - Idempotent: re-running fixes stale symlinks, leaves user copies alone.

10import { existsSync, promises

bin/surf-plan-skill.mjsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 6

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

bin/surf-plan-skill.mjsView on unpkg

Source & flagged code

4 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./src/install/postinstall.mjs || true

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node ./src/install/postinstall.mjs || true

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

src/lib/harness-install.mjsView file

4// - Symlink the package root into each harness's skill dir L5: // (~/.claude/skills/<skill-name>, ~/.agents/skills/<skill-name>, etc.) L6: // - On Windows: try fs.symlink with type='junction' first (no admin needed ... L19: export const HARNESS_DIRS = [ L20: path.join(home, '.agents', 'skills'), // OpenCode + GH Copilot CLI canonical L21: path.join(home, '.claude', 'skills'), // Claude Code L22: path.join(home, '.codex', 'skills'), // OpenAI Codex CLI L23: path.join(home, '.pi', 'agent', 'skills'), // Pi Coding Agent ... L74: // Fallback: recursive copy (Windows without dev mode). L75: await fs.cp(target, link, { recursive: true }); L76: return { action: 'copied' }; ... L106: //

Findings

1 Critical2 High4 Medium5 Low

CriticalAi Agent Control Hijacksrc/lib/harness-install.mjs

HighInstall Time Lifecycle Scriptspackage.json

HighSemantic Analysis Limitedbin/surf-plan-skill.mjs

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to surf-agent-skill@8.0.1.

See all versions of surf-agent-skill for other recorded verdicts.

Review the evidence and your use of surf-agent-skill@8.0.1 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-08-29 22:36:18.385Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.