registry / @axiomantic/vine / 0.1.3

@axiomantic/vine@0.1.3

Sub-Second APFS Copy-on-Write Workspaces & Zero-Mirage Git Weaving Engine

AI Security Review

scanned 9d ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

One or more suspicious static signals were detected.

Trigger

A user explicitly runs scripts/install.sh.

Impact

It can alter AI-agent guidance on the local machine, but requires explicit execution of the installer.

Mechanism

The script checks for existing agent-rule directories and overwrites Braid-named instruction files in them.

AI rationale

The installer performs multi-product AI-agent configuration writes, creating a real but user-triggered control-surface risk. There is no lifecycle hook or evidence of automatic execution, exfiltration, or destructive behavior.

Evidence

scripts/install.sh

Decision evidence

public snapshot

AI called this Suspicious at 91.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

The included installer conditionally overwrites rule files for Claude Code and OpenCode.
The installer also writes a rule file for Gemini Antigravity.
The package manifest exposes a CLI entry point but no npm lifecycle hook.

@axiomantic/vine@0.1.3

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code