vit@0.6.4: AI-agent control-surface risk | LPM Firewall

Loading npm security reports…

vit@0.6.4: AI-agent control-surface risk | LPM Firewall

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node src/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node src/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

src/cmd/hack.jsView file

3L4: import { execFileSync } from 'node:child_process'; L5: import { existsSync, readFileSync, writeFileSync } from 'node:fs';

High

Child Process

Package source references child process execution.

src/cmd/hack.jsView on unpkg · L3

src/lib/skill-install.jsView file

3L4: import { cpSync, existsSync, mkdirSync, readdirSync, readFileSync } from 'node:fs'; L5: import { homedir } from 'node:os'; ... L60: const targets = [ L61: { label: 'claude', path: join(home, '.claude', 'skills', name) }, L62: { label: 'agents', path: join(home, '.agents', 'skills', name) }, L63: ]; ... L80: const existed = existsSync(join(target.path, 'SKILL.md')); L81: mkdirSync(target.path, { recursive: true }); L82: cpSync(sourceDir, target.path, { recursive: true, force: true }); L83: return {

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

src/lib/skill-install.jsView on unpkg · L3

src/cmd/learn.jsView file

58if (isGlobal) addArgs.push('-g'); L59: const addResult = spawnSync('npx', addArgs, { L60: encoding: 'utf-8', ... L67: } L68: if (verbose) vlog('[verbose] installed via npx skills add'); L69: } finally {

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

src/cmd/learn.jsView on unpkg · L58

src/cmd/vet.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = vit@0.5.1 matchedIdentity = npm:dml0:0.5.1 similarity = 0.615 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/cmd/vet.jsView on unpkg

Source & flagged code

6 flagged

package.jsonView file

Lines 1-39json

1{

2 "name": "vit",

3 "version": "0.6.4",

4 "description": "Social toolkit for personalized software",

5 "license": "MIT",

6 "bin": {

7 "vit": "bin/vit.js"

8 },

9 "exports": {

10 "./cap.js": "./src/lib/cap.js"

11 },

12 "files": [

13 "bin/",

14 "src/",

15 "skills/vit/"

16 ],

17 "type": "module",

18 "scripts": {

19 "postinstall": "node src/postinstall.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L19

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L19

20 },

21 "engines": {

22 "node": ">=20.10.0"

23 },

24 "dependencies": {

25 "@atproto/api": "^0.18.20",

26 "@atproto/common-web": "^0.4.16",

27 "@atproto/oauth-client-node": "^0.3.16",

28 "@ipld/dag-cbor": "^9.2.0",

29 "@noble/curves": "^1.8.0",

30 "@noble/hashes": "^1.7.0",

31 "@scure/bip39": "1.6.0",

32 "bs58": "^6.0.0",

33 "commander": "^13.0.0",

34 "env-paths": "4.0.0",

35 "isomorphic-git": "1.37.0",

36 "memfs": "4.56.10"

37 },

38 "devDependencies": {

39 "marked": "^17.0.4"

src/cmd/hack.jsView file

Lines 1-23javascript

1// SPDX-License-Identifier: MIT

2// Copyright (c) 2026 sol pbc

3

4import { execFileSync } from 'node:child_process';

5import { existsSync, readFileSync, writeFileSync } from 'node:fs';

High

Child Process

Package source references child process execution.

src/cmd/hack.jsView on unpkg · L3

6import { join, resolve }

src/lib/skill-install.jsView file

Lines 1-23javascript

1// SPDX-License-Identifier: MIT

2// Copyright (c) 2026 sol pbc

3

4import { cpSync, existsSync, mkdirSync, readdirSync, readFileSync } from 'node:fs';

5import { homedir } from 'node:os';

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

src/lib/skill-install.jsView on unpkg · L3

src/cmd/learn.jsView file

Lines 38-78javascript

38

39 try {

40 const blobCid = resource.blob?.ref?.$link || resource.blob?.cid;

41 if (blobCid) {

42 const blobUrl = new

src/cmd/vet.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = vit@0.5.1 matchedIdentity = npm:dml0:0.5.1 similarity = 0.615 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/cmd/vet.jsView on unpkg