La clasificación de Jev bloquea scripts de install de npm en pkg-gate de Hemanth.HM
Guardrails- Latencia
- ~100 ms
- Resultado
- Un allow, warn o block tipado para el script de install
Pregunta a Jev el Choice de intent, Score de threat, Noul de secret y Noul de remote-exec para este script de ciclo de vida npm.
Preguntas
Primitive
Choice
Ask a multiple choice question
- Name
- script_intent
- Instrucciones
- What is the primary intent and runtime behavior of `script_content` executed in lifecycle hook `lifecycle_hook`?
- Criterios
- build_tool
Standard compilation or native build (e.g. node-gyp, esbuild, tsc, cargo)
- binary_download
Downloads official pre-compiled native binaries or assets from a known repository or CDN
- benign_notice
Informational message, donation banner, or benign no-op command
- system_recon
Gathers host system details, environment variables, network interfaces, or user directories
- credential_access
Reads or extracts secrets, authentication tokens (NPM_TOKEN, AWS, SSH keys), or credential files
- obfuscated_exec
Executes obfuscated code, base64 payloads, or pipes curl/wget to bash/sh/node
- other
General package maintenance or utility task
- build_tool
Primitive
Score
Set up a rubric to grade with
- Name
- threat_severity
- Instrucciones
- How severe is the security risk of executing `script_content` during npm install of `package.name`?
- Criterios
- 0
Safe: standard build or benign command with no external network or secret access
- 1
Low risk: fetches known binary from release domain or routine package setup
- 2
Suspicious: makes non-standard outbound connections, inspects system environment, or runs encoded commands
- 3
Critical threat: credential harvesting, token exfiltration, backdoor dropper, or destructive action
- 0
Primitive
Noul
Evaluate how true something is
- Name
- accesses_secrets
- Instrucciones
- Does `script_content` attempt to access, extract, or transmit environment variables, private credentials, or authentication tokens?
Primitive
Noul
Evaluate how true something is
- Name
- remote_execution
- Instrucciones
- Does `script_content` download and execute arbitrary unverified external code or pipe remote scripts directly into a shell?