registry / @agent-qofeno/agentx-cli / 2.1.0
@agent-qofeno/agentx-cli@2.1.0
The AI agent that builds production-ready websites from your terminal
AI Security Review
scanned 27d ago · by lpm-firewall-aiThe published package has no lifecycle hook, and the CLI entrypoint does not perform network, credential, or shell work. The unused postinstall script is not invoked by install or by the bin, so it is not an active attack.
Static reason
One or more suspicious static signals were detected.
Trigger
No install, import, or runtime trigger invokes remote skill installation or other side effects.
Impact
Installing or launching the package does not change agent configuration, export credentials, or execute a remote payload.
Mechanism
npm does not run scripts/postinstall.js, and the CLI message callback is empty, so no shell, file, or network action follows a user message.
AI rationale
The published package has no lifecycle hook, and the CLI entrypoint does not perform network, credential, or shell work. The unused postinstall script is not invoked by install or by the bin, so it is not an active attack.
Decision evidence
public snapshotAI called this Clean at 86.0% confidence as Benign with medium false-positive risk.
Evidence for AI clean decision
- package.json maps the agentx bin to dist/index.js and defines only build, prepublishOnly, dev, typecheck, and test scripts, with no preinstall, install, or postinstall hook.
- dist/index.js starts only when the user runs the CLI. main renders a terminal UI and passes an empty onUserMessage handler, so submitted text does not call a model, network, or shell.
- scripts/postinstall.js can run npx skills add for two GitHub repositories, but package.json and dist/index.js never invoke that file.
Evidence against
- scripts/postinstall.js would execute npx skills add against GitHub repositories if someone ran that file directly.
- The README describes shell tools and credential storage that the bundled entrypoint does not implement.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
4 flagged · loading sourcedist/index.jsView file
30785function wrapAnsi(string, columns, options) {
L30786: return String(string).normalize().replace(/\r\n/g, "\n").split("\n").map((line) => exec(line, columns, options)).join("\n");
L30787: }
High
scripts/postinstall.jsView file
6console.log('Installing skill:', skill)
L7: execSync(`npx skills add ${repo} ${skill}`, {
L8: stdio: 'pipe', timeout: 60000
High
Runtime Package Install
Package source invokes a package manager install command at runtime.
scripts/postinstall.jsView on unpkg · L6dist/yoga.wasmView file
•path = dist/yoga.wasm
kind = wasm_module
sizeBytes = 88658
magicHex = [redacted]
Findings
3 High5 Medium6 Low
HighChild Processdist/index.js
HighShell
HighRuntime Package Installscripts/postinstall.js
MediumNetwork
MediumEnvironment Vars
MediumShips Wasm Moduledist/yoga.wasm
MediumShips Build Helperscripts/setup-homebrew-tap.sh
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @agent-qofeno/agentx-cli@2.1.0.
See all versions of @agent-qofeno/agentx-cli for other recorded verdicts.
- Review the evidence and your use of @agent-qofeno/agentx-cli@2.1.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.