twintest@0.1.1: AI-agent control-surface risk | LPM Firewall

Loading npm security reports…

twintest@0.1.1: AI-agent control-surface risk | LPM Firewall

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

18"scripts": { "test": "wdio run wdio.conf.ts", "test:repair": "node bin/self-repair.mjs", "appium:setup": "ts-node scripts/setup-appium.ts", "appium:start": "appium --address 127.0.0.1 --port 4723 --allow-cors", "appium:doctor": "appium driver doctor windows", "postinstall": "node scripts/postinstall.cjs",

High

Suspicious Lifecycle Evidence

postinstall runs automatically on npm install.

package.jsonView on unpkg · L18

•scripts.postinstall = node scripts/postinstall.cjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

scripts/postinstall.cjsView file

6* Adapted from the achilles postinstall pattern: L7: * - Copies skills to ~/.claude/skills/ and <project>/.claude/skills/ L8: * - Copies hooks to ~/.claude/hooks/ and registers them in settings.json L9: * - Idempotent: safe to run multiple times ... L23: if (require.main === module && !packageDir.includes('node_modules')) { L24: // For local dev, still install skills to project-level .claude/skills/ L25: installLocalSkills(); ... L31: const destinations = [ L32: path.join(projectRoot, '.claude', 'skills'), L33: path.join(homeDir, '.claude', 'skills'), L34: ]; ... L44: function copyDirRecursive(src, dest) {

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/postinstall.cjsView on unpkg · L6

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. #!/usr/bin/env node const fs = require('fs'); const path = require('path'); const os = require('os'); const packagedir = path.resolve(__dirname, '..'); const skillsdir = path.join(packagedir, 'skills'); const projectroot = path.resolve(__dirname, '..', '..', '..', '..');

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

scripts/postinstall.cjsView on unpkg

hooks/winappdriver-session-guard.shView file

•path = hooks/winappdriver-session-guard.sh kind = build_helper sizeBytes = 1758 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

hooks/winappdriver-session-guard.shView on unpkg

Source & flagged code

6 flagged

package.jsonView file

Lines 1-44json

1{

2 "name": "twintest",

3 "version": "0.1.1",

4 "description": "Windows desktop application test automation framework — Appium 2.x + appium-windows-driver + WebDriverIO + Cucumber-js.",

5 "type": "module",

6 "main": "dist/index.js",

7 "types": "dist/index.d.ts",

8 "exports": {

9 ".": {

10 "import": "./dist/index.js",

11 "types": "./dist/index.d.ts"

12 },

13 "./config": {

14 "import": "./dist/config.js",

15 "types": "./dist/config.d.ts"

16 }

17 },

18 "scripts": {

19 "test": "wdio run wdio.conf.ts",

20 "test:repair": "node bin/self-repair.mjs",

21 "appium:setup": "ts-node scripts/setup-appium.ts",

22 "appium:start": "appium --address 127.0.0.1 --port 4723 --allow-cors",

23 "appium:doctor": "appium driver doctor windows",

24 "postinstall": "node scripts/postinstall.cjs",

High

Suspicious Lifecycle Evidence

postinstall runs automatically on npm install.

package.jsonView on unpkg · L18

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L24

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L24

25 "build": "tsc -p tsconfig.build.json",

26 "prepublishOnly": "npm run build"

27 },

28 "bin": {

29 "twintest-self-repair": "bin/self-repair.mjs"

30 },

31 "files": [

32 "dist",

33 "bin",

34 "hooks",

35 "skills",

36 "schemas",

37 "scripts/postinstall.cjs",

38 "README.md"

39 ],

40 "dependencies": {

41 "dotenv": "^16.0.0"

42 },

43 "peerDependencies": {

44 "@wdio/appium-service": "^9.0.0",

scripts/postinstall.cjsView file

Lines 1-26javascript

1#!/usr/bin/env node

2

3/**

4 * postinstall.js — auto-install twintest skills and hooks.

5 *

6 * Adapted from the achilles postinstall pattern:

7 * - Copies skills to ~/.claude/skills/ and <project>/.claude/skills/

8 * - Copies hooks to ~/.claude/hooks/ and registers them in settings.json

9 * - Idempotent: safe to run multiple times

10 */

11

12

hooks/winappdriver-session-guard.shView file

•path = hooks/winappdriver-session-guard.sh kind = build_helper sizeBytes = 1758 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

hooks/winappdriver-session-guard.shView on unpkg