@agent-qofeno/agentx-cli@2.0.4
The AI agent that builds production-ready websites from your terminal
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe remote skill installer is a real inert payload carrier, but source inspection shows no automatic trigger, credential theft, destructive behavior, or executable-entrypoint attack chain. Warn rather than block.
Static reason
One or more suspicious static signals were detected.
Trigger
Explicit execution of node scripts/postinstall.js.
Impact
Could add unreviewed remote skills to the invoking user's skill environment.
Mechanism
Runs npx skills add for two remote repositories.
AI rationale
The remote skill installer is a real inert payload carrier, but source inspection shows no automatic trigger, credential theft, destructive behavior, or executable-entrypoint attack chain. Warn rather than block.
Evidence
package.jsonscripts/postinstall.jsdist/index.js
Network endpoints2
github.com/sohailkhan0525/skillsgithub.com/nextlevelbuilder/ui-ux-pro-max-skill
Decision evidence
public snapshotAI called this Suspicious at 89.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- Dormant scripts/postinstall.js runs npx to install remote skills from two GitHub repositories.
- The installer suppresses failures, reducing visibility if manually executed.
Evidence against
- package.json has no install, preinstall, or postinstall lifecycle hook; only prepublishOnly builds artifacts.
- The shipped bin starts a terminal UI; its user-message callback is empty and performs no agent action.
- No credential harvesting, exfiltration, destructive operation, or runtime child-process call was found in the executable entrypoint.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
4 flagged · loading sourcedist/index.jsView file
30785function wrapAnsi(string, columns, options) {
L30786: return String(string).normalize().replace(/\r\n/g, "\n").split("\n").map((line) => exec(line, columns, options)).join("\n");
L30787: }
High
scripts/postinstall.jsView file
6console.log('Installing skill:', skill)
L7: execSync(`npx skills add ${repo} ${skill}`, {
L8: stdio: 'pipe', timeout: 60000
High
Runtime Package Install
Package source invokes a package manager install command at runtime.
scripts/postinstall.jsView on unpkg · L6dist/yoga.wasmView file
•path = dist/yoga.wasm
kind = wasm_module
sizeBytes = 88658
magicHex = [redacted]
Findings
2 High5 Medium5 Low
HighChild Processdist/index.js
HighRuntime Package Installscripts/postinstall.js
MediumNetwork
MediumEnvironment Vars
MediumShips Wasm Moduledist/yoga.wasm
MediumShips Build Helperscripts/setup-homebrew-tap.sh
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @agent-qofeno/agentx-cli@2.0.4.
See all versions of @agent-qofeno/agentx-cli for other recorded verdicts.
- Review the evidence and your use of @agent-qofeno/agentx-cli@2.0.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.