registry  /  @100xprompt/cli-darwin-arm64  /  0.1.1

@100xprompt/cli-darwin-arm64@0.1.1

AI Security Review

scanned 17h ago · by lpm-firewall-ai

No confirmed malicious attack surface was established. The package is an architecture-specific native CLI with a limited codesign postinstall step and user-invoked AI-agent runtime features.

Static reason
One or more suspicious static signals were detected.
Trigger
npm install runs postinstall; user invokes bin/100xprompt for runtime behavior.
Impact
Install hook modifies only the packaged binary signature; no confirmed credential exfiltration, persistence, destructive action, or foreign AI-agent control hijack was found.
Mechanism
native CLI plus package-local codesign postinstall
Rationale
The suspicious primitives are package-aligned for a Darwin arm64 CLI: a bundled native binary, source maps, and a postinstall codesign repair step limited to that binary. Static inspection did not find lifecycle-triggered exfiltration, persistence, destructive behavior, or unconsented mutation of broad/foreign AI-agent control surfaces.
Evidence
package.jsonbin/100xpromptbin/index.js.mapbin/worker.js.mapbin/parser.worker.js.map./bin/100xprompt$XDG_DATA_HOME/100xprompt$XDG_CONFIG_HOME/100xprompt$XDG_STATE_HOME/100xprompt$XDG_CACHE_HOME/100xprompt

Decision evidence

public snapshot
AI called this Clean at 86.0% confidence as Benign with low false-positive risk.
Evidence for block
  • package.json defines a postinstall lifecycle script.
  • Package ships a Mach-O arm64 executable at bin/100xprompt.
  • Source maps show AI-agent style runtime features such as swarm pane spawning and provider/model support.
Evidence against
  • postinstall only removes/reapplies codesign signature on ./bin/100xprompt and ignores failures.
  • No package.json dependencies, JS wrapper, or install-time network/download command are present.
  • Source maps show app-owned XDG paths under 100xprompt, not foreign Claude/Codex/Cursor/MCP control-surface writes at install time.
  • Agent/swarm features are user-invoked runtime CLI behavior, not lifecycle-triggered persistence or hijack.
Behavioral surface
SourceNo risky source behavior triggered.
Supply chainNo supply-chain packaging signals triggered.
Manifest
NoLicense
scanned 0 file(s), 0 B of source

Source & flagged code

3 flagged · loading source
package.jsonView file
•scripts.postinstall = codesign --remove-signature ./bin/100xprompt || true; codesign --sign - --force --preserve-metadata=entitlements,requirements,flags,runtime ./bin/100xprompt || true
High
Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg
•scripts.postinstall = codesign --remove-signature ./bin/100xprompt || true; codesign --sign - --force --preserve-metadata=entitlements,requirements,flags,runtime ./bin/100xprompt || true
Medium
Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg
bin/100xpromptView file
•path = bin/100xprompt kind = native_binary sizeBytes = 113187520 magicHex = [redacted]
Medium
Ships Native Binary

Package ships native binary artifacts.

bin/100xpromptView on unpkg

Findings

1 High2 Medium2 Low
HighInstall Time Lifecycle Scriptspackage.json
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumShips Native Binarybin/100xprompt
LowScripts Present
LowNo License