registry / @central-icons-qwik/round-outlined-radius-2-stroke-1 / 1.1.317

@central-icons-qwik/round-outlined-radius-2-stroke-1@1.1.317

A collection of round outlined Qwik icons with 2px radius and 1px stroke width, designed for use in Qwik applications.

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. The package includes a first-party AI assistant skill and directs an explicit user command to install it into an assistant-specific configuration path. Installation also automatically sends a license key to a fixed vendor endpoint.

Static reason

One or more suspicious static signals were detected.

Trigger

Running npm installation triggers the license check; separately running the README's npx skills add command installs the agent skill.

Impact

The explicit setup can add package-authored instructions to an AI coding assistant's skill directory.

Mechanism

Install-time license validation and explicit AI-agent skill setup.

AI rationale

No payload execution, filesystem mutation, secret harvesting beyond the license token, or destructive behavior was found. The explicit AI-agent extension setup remains a policy-defined lifecycle risk.

Evidence

README.mdskills/central-icons-qwik/SKILL.mdlicense-check.js.claude/skills/central-icons-qwik/

Network endpoints1

centralicons.com/license/check

Decision evidence

public snapshot

AI called this Suspicious at 87.0% confidence as Dangerous Capability with false-positive risk.

@central-icons-qwik/round-outlined-radius-2-stroke-1@1.1.317

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code