registry / @agentscope-ai/platform-cli / 1.0.3

@agentscope-ai/platform-cli@1.0.3

AgentScope Platform CLI (asp) — authentication for AgentScope Platform

AI Security Review

scanned 16h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

No blocking static signals were detected.

Trigger

User runs `asp plugin install <id>` or `asp skill install <id>`.

Impact

May install an agent plugin or skill through `qwenpaw`; the package itself does not directly mutate broad agent configuration.

Mechanism

Explicit command delegates a platform-issued artifact URL to `qwenpaw`.

Rationale

No concrete malicious behavior or unconsented install-time mutation was found. The explicit delegation to `qwenpaw` remains a meaningful agent-extension installation capability, so a warning is appropriate.

Evidence

package.jsondist/cli.jsdist/chunk-IWWTP4LN.jsREADME.md~/.asp/credentials.json~/.asp/publish-submissions.json

Network endpoints2

platform.agentscope.io127.0.0.1

Decision evidence

public snapshot

AI called this at 88.0% confidence with false-positive risk.

@agentscope-ai/platform-cli@1.0.3

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code