registry / @agent-qofeno/agentx-cli / 2.0.2

@agent-qofeno/agentx-cli@2.0.2

The AI agent that builds production-ready websites from your terminal

AI Security Review

scanned 4h ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. npm installation automatically invokes a shell command to add AI skills from external repositories. This mutates an AI-agent skill/control surface without an explicit user setup command.

Static reason

One or more suspicious static signals were detected.

Trigger

npm postinstall during package installation

Impact

Installs externally supplied AI-agent skills, allowing third-party instructions/capabilities to affect compatible agent environments.

Mechanism

execSync runs npx skills add for remote repositories

Policy narrative

Installing the package triggers scripts/postinstall.js automatically. That script shells out to `npx skills add` twice, sourcing skills from external GitHub repositories; failures are caught and hidden as skipped installs. This is an unconsented install-time mutation of an AI-agent skill/control surface, rather than an explicit user-invoked setup action.

Rationale

The package’s postinstall hook performs remote third-party AI-skill installation through a shell command. This satisfies the policy’s concrete unconsented install-time foreign AI-agent control-surface mutation threshold.

Evidence

package.jsonscripts/postinstall.js

Network endpoints2

github.com/sohailkhan0525/skillsgithub.com/nextlevelbuilder/ui-ux-pro-max-skill

Decision evidence

public snapshot

AI identified this as a dangerous AI-agent capability at 98.0% confidence with low false-positive risk.

Evidence for policy risk

Install lifecycle runs a postinstall script.
Postinstall silently executes `npx skills add` via shell.
It installs skills from two external GitHub repositories without a user command.

Evidence against

The postinstall script contains no credential collection or direct data-exfiltration logic.
The observed lifecycle behavior is limited to the two remote skill-install attempts.

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 257 KB of source, external domains: agentclientprotocol.com, github.com, nodejs.org

Oversized source lightweight scan

dist/index.js20.5 MB file, sampled 256 KB

FilesystemNetworkChildProcessEnvironmentVarsShellHighEntropyStringsUrlStringsagentclientprotocol.comgithub.comnodejs.org

Source & flagged code

6 flagged

package.jsonView file

Lines 2-42json

2 "$schema": "https://json.schemastore.org/package.json",

3 "name": "@agent-qofeno/agentx-cli",

4 "version": "2.0.2",

5 "type": "module",

6 "description": "The AI agent that builds production-ready websites from your terminal",

7 "bin": {

8 "agentx": "dist/index.js"

9 },

10 "files": [

11 "dist/",

12 "scripts/",

13 "README.md",

14 "LICENSE"

15 ],

16 "engines": {

17 "node": ">=18.0.0"

18 },

19 "scripts": {

20 "build": "node script/build.js",

21 "dev": "npm run build -- --watch",

22 "postinstall": "node scripts/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L22

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L22

23 "prepublishOnly": "npm run build"

24 },

25 "publishConfig": {

26 "access": "public"

27 },

28 "repository": {

29 "type": "git",

30 "url": "https://github.com/SohailKhan0525/agentx-cli.git"

31 },

32 "homepage": "https://github.com/SohailKhan0525/agentx-cli",

33 "bugs": {

34 "url": "https://github.com/SohailKhan0525/agentx-cli/issues"

35 },

36 "author": "SohailKhan0525",

37 "keywords": [

38 "ai",

39 "cli",

40 "agent",

41 "website-builder",

42 "terminal",

scripts/postinstall.jsView file

Lines 1-26javascript

1#!/usr/bin/env node

2import { execSync } from "child_process"

High

Child Process

Package source references child process execution.

scripts/postinstall.jsView on unpkg · L1

4function tryInstallSkill(repo, skill) {

5 try {

dist/index.jsView file

•path = dist/index.js kind = oversized_source_file sizeBytes = 21474038 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/index.jsView on unpkg

•path = dist/index.js kind = oversized_cli_entrypoint sizeBytes = 21474038 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/index.jsView on unpkg

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

scripts/postinstall.jsView file

1#!/usr/bin/env node L2: import { execSync } from "child_process" L3:

High

Child Process

Package source references child process execution.

scripts/postinstall.jsView on unpkg · L1

6console.log("Installing skill:", skill) L7: execSync(`npx skills add ${repo} ${skill}`, { L8: stdio: "pipe",

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

scripts/postinstall.jsView on unpkg · L6

dist/index.jsView file

•path = dist/index.js kind = oversized_source_file sizeBytes = 21474038 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/index.jsView on unpkg

•path = dist/index.js kind = oversized_cli_entrypoint sizeBytes = 21474038 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/index.jsView on unpkg

Findings

4 High6 Medium5 Low

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processscripts/postinstall.js

HighShell

HighRuntime Package Installscripts/postinstall.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumNetwork

MediumEnvironment Vars

MediumOversized Source Filedist/index.js

MediumOversized Cli Entrypointdist/index.js

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings