registry / @agentproto/driver-agent-cli / 1.2.0

@agentproto/driver-agent-cli@1.2.0

@agentproto/driver-agent-cli — AIP-45 AGENT-CLI.md reference implementation. Multi-protocol runner that loads an AGENT-CLI.md manifest, spawns the binary, and dispatches turns through an ACP / MCP / proprietary arm. ACP arm delegates to @agentproto/acp; e

AI Security Review

scanned 8h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

Caller starts a print/`mastra-jsonl` runtime with `mcpServers` configured.

Impact

A caller-provided MCP server may receive the permissions granted by the external agent CLI during that requested session.

Mechanism

Runtime CLI spawning with temporary MCP configuration injection.

Rationale

Source inspection found an explicit runtime MCP configuration mutation and arbitrary configured CLI/adapter execution, but no malicious payload, network exfiltration, or lifecycle abuse. Downgrade to warn under the agent-control-surface policy for explicit agent configuration capability.

Evidence

package.jsondist/index.mjsdist/chunk-TJHKDKCU.mjsdist/manifest/index.mjs.mastracode/mcp.json

Decision evidence

public snapshot

AI called this Suspicious at 88.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

@agentproto/driver-agent-cli@1.2.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code