registry / @cestoliv/wt / 0.6.0

@cestoliv/wt@0.6.0

Merged into @cestoliv/forest — npm i -g @cestoliv/forest (provides wt).

Fast, interactive TUI to browse, create, open, and delete git worktrees across repos.

AI Security Review

scanned 10h ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. No install-time attack behavior is established. The explicit wt agent workflow modifies first-party Zed task/keymap configuration and starts a configured AI agent.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs wt agent or selects the interactive agent action.

Impact

Can start a configured agent with a selected permission mode; global Zed keymap binding persists.

Mechanism

User-invoked Zed agent-task/keymap setup and process launch.

Rationale

This is not malicious source behavior, but the explicit agent workflow creates a persistent first-party editor binding and can launch high-permission agent modes. Per policy, that warrants a warn rather than a block.

Evidence

package.jsondist/cli.jsdist/agent-AANHA7KU.jsdist/chunk-CMLMXQED.jsdist/chunk-5I4DZ7XH.js.zed/tasks.json~/.config/zed/keymap.jsontemporary wt-agent-* directory

Decision evidence

public snapshot

AI called this Suspicious at 91.0% confidence as Dangerous Capability with low false-positive risk.

@cestoliv/wt@0.6.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code