Loading npm security reports…

ttj-skills-playwright@1.4.6: Suspicious npm security report | LPM Firewall

registry / ttj-skills-playwright / 1.4.6

ttj-skills-playwright@1.4.6

Drive an existing Chrome over CDP (Playwright core) with one-shot commands — eval, goto, click, type, wait, tabs, screenshot — plus page element visualization and crawl-target analysis. Skill for Claude Code & Codex.

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. Installation creates global Claude Code and Codex skill entries for this package. Normal CLI startup checks npm once per day and may globally update itself in a detached process.

Static reason

High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source

Trigger

`npm install` activates postinstall; later user execution of `ttj-skills-playwright` activates update logic.

Impact

Installs persistent package-owned agent instructions and can replace the global package version; no concrete exfiltration or foreign-control-surface takeover is established.

Mechanism

First-party AI-agent skill installation plus detached self-update and CDP browser control.

Rationale

Source inspection confirms a package-owned global AI-skill installation at postinstall and a runtime detached self-update path. Per policy this warrants a warning rather than a block because the writes target the package's own skill directory and no concrete malicious chain was found.

Evidence

package.jsonscripts/install-skill.js.claude/skills/ttj-skills-playwright/SKILL.mddist/cli.jsdist/browser.jsdist/utils.jsdist/cdp.jsdist/analyzer.js~/.claude/skills/ttj-skills-playwright/SKILL.md~/.agents/skills/ttj-skills-playwright/SKILL.md~/.ttj-skills-playwright-installed~/.ttj-skills-playwright/.last-update-check

Source & flagged code

4 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/install-skill.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/utils.jsView file

5import path from 'path'; L6: import net from 'net'; L7: import http from 'http'; L8: import https from 'https'; L9: import { exec } from 'child_process'; L10: import { promisify } from 'util'; ... L18: */ L19: export const getOsType = () => process.platform === 'win32' L20: ? 'windows' ... L26: */ L27: export const getHomeDir = () => os.homedir(); L28: /**

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/utils.jsView on unpkg · L5

•matchType = previous_version_dangerous_delta matchedPackage = ttj-sk[redacted]@1.1.0 matchedIdentity = npm:dHRqLXNraWxscy1wbGF5d3JpZ2h0:1.1.0 similarity = 0.571 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/utils.jsView on unpkg

scripts/install-skill.jsView file

14Install-time AI-agent control hijack evidence: L14: const skillName = 'ttj-sk[redacted]'; L15: const sk[redacted] = path.join(__dirname, '..', '.claude', 'skills', skillName); L16: const skillFile = 'SKILL.md'; ... L19: if (!fs.existsSync(dir)) { L20: fs.mkdirSync(dir, { recursive: true }); L21: } ... L53: // Claude Code: 기존 /ttj-sk[redacted] 호출 방식 유지 L54: const claudeTargetDir = path.join(homedir(), '.claude', 'skills', skillName); L55: const claudeTargetFile = path.join(claudeTargetDir, skillFile); L56: ensureDir(claudeTargetDir); L57: fs.copyFileSync(sourceFile, claudeTargetFile); L58: console.log(`✅ Claude Code 스킬 설치 완료: ${claudeTargetFile}`); Payload evidence from .claude/skills/ttj-sk[redacted]/SKILL.md: L40: L41: When the skill is activated, always start with the bare command `ttj-

Critical

Ai Agent Control Hijack

Install-time source drops package-supplied AI-agent/MCP control files or instructions.

scripts/install-skill.jsView on unpkg · L14