registry / trimprompt / 1.0.35

trimprompt@1.0.35

TrimPrompt — Save 80% on LLM tokens. Zero-config CLI proxy for AI coding agents

AI Security Review

scanned 20h ago · by lpm-firewall-ai

LPM blocks this version under the AI-agent control-surface policy. Installation persistently alters the user's PATH and shadows common commands for AI-agent sessions. The shims route commands through the package's CLI.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm postinstall

Impact

Interception of broad command execution and output in AI-agent environments.

Mechanism

shell-profile PATH hijacking with AI-agent-gated command shims

Policy narrative

On npm installation, the postinstall command invokes `shims install`. It creates replacements for common commands under `~/.trimprompt/shims` and automatically prepends that directory to shell profiles and Windows user PATH. In AI-agent environments, each shim redirects the original command to `trim`, whose executor runs and captures command output. This is an unconsented install-time mutation of a broad AI-agent command-control surface.

Rationale

The install hook establishes persistent, broad command interception specifically for AI-agent contexts. This meets the block boundary for unconsented postinstall mutation of a foreign/broad AI-agent control surface.

Evidence

package.jsoncli.jsshims.jsexecutor.jstracker.jssync.js~/.trimprompt/shims~/.bashrc~/.bash_profile~/.profile~/.zshrc

trimprompt@1.0.35

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code