registry / @agent-qofeno/agentx-cli / 1.20.91

@agent-qofeno/agentx-cli@1.20.91

<p align="center"> <h1 align="center">@agent-qofeno/agentx-cli</h1> <p align="center"><strong>The autonomous AI agent that builds production-ready websites from your terminal.</strong></p> </p>

AI Security Review

scanned 7d ago · by lpm-firewall-ai

No confirmed malicious attack surface was established. Installation declares no lifecycle execution; runtime begins only when the user invokes `agentx`.

Static reason

No blocking static signals were detected.

Trigger

Explicit `agentx`/npx invocation

Impact

The invoked CLI may execute its bundled binary, but no unconsented persistence, exfiltration, or remote payload chain was confirmed.

Mechanism

Local platform-binary launcher

Rationale

The package has no install-time hooks and its JavaScript entrypoint is a conventional user-invoked local binary launcher. Native artifacts and agent functionality warrant normal trust scrutiny, but source inspection found no concrete malicious behavior.

Evidence

package.jsonbin/agentx.cjsskills/ui-ux-pro-max/scripts/search.pyskills/ui-ux-pro-max/scripts/design_system.pybin/agentxbin/agentx.exe

Decision evidence

public snapshot

AI called this Clean at 78.0% confidence as Benign with medium false-positive risk.

Evidence for block

No npm lifecycle hook is declared; the only executable entry is the user-invoked `agentx` bin.

@agent-qofeno/agentx-cli@1.20.91

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code