SG-089: Rhetorical misdirection of package source
Severity: HIGH
Corporate-policy framing ('audited', 'approved internal mirror') colocated with a package-registry / source mutation or a private-host URL. Manual review required because the same shape appears in legitimate enterprise configs.
Fires when
- Corporate-policy framing ('audited mirror', 'approved internal registry') sits next to a package-registry / source mutation (npm/yarn config set registry, pip config set global.index-url, poetry source add).
- The same framing sits next to a private-host URL (.internal / .corp / .local / .lan / .intranet).
- Both signals must be colocated; because legitimate enterprise mirror configs use the same language, matches are tagged for manual review.
Remediation
Confirm the registry / mirror host is on your real corporate allowlist before running the skill. If the host is unfamiliar, treat as a hijack: a leaked lockfile or npm config can intercept every dependency installed under that session.