registry / @agent-qofeno/agentx-cli / 1.20.66

@agent-qofeno/agentx-cli@1.20.66

The AI agent that builds production-ready websites from your terminal

AI Security Review

scanned 27d ago · by lpm-firewall-ai

No confirmed malicious attack surface is established. The install hook performs platform/CPU detection, obtains a declared same-scope optional binary when necessary, copies it into the package bin directory, and validates it.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

npm postinstall; later explicit agentx CLI invocation

Impact

Installs and runs the package's declared platform binary; no exfiltration, destructive action, or AI-agent control mutation is present in inspected source.

Mechanism

platform-specific binary resolution and fallback installation

Rationale

The lifecycle behavior is a package-aligned native-CLI bootstrap fallback, not a concrete malicious chain. Static scanner signals arise from legitimate platform probing and child-process use.

Evidence

package.jsonpostinstall.mjsbin/agentx.cjsbin/agentx.exe/proc/cpuinfo/etc/alpine-release

Decision evidence

public snapshot

AI called this Clean at 88.0% confidence as Benign with low false-positive risk.

Evidence for block

package.json defines a postinstall hook.

@agent-qofeno/agentx-cli@1.20.66

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code