registry / @cubic-dev-ai/cli / 1.14.2

@cubic-dev-ai/cli@1.14.2

AI Security Review

scanned 12d ago · by lpm-firewall-ai

An automatic npm lifecycle hook installs and configures a separate git-ai tool in the user's environment. It retrieves a remote shell installer and executes it without an interactive consent gate.

Static reason

One or more suspicious static signals were detected.

Trigger

Installing the package with lifecycle scripts enabled.

Impact

Installation can execute remotely supplied code and mutate a foreign AI-agent tool's user-level configuration.

Mechanism

postinstall invokes git-ai setup, streams a GitHub installer into bash when needed, and sets git-ai configuration values.

Attack narrative

During package installation, npm runs postinstall. The hook calls git-ai setup unconditionally after its own binary setup. If the separate tool is missing or outdated, it downloads a versioned installer from GitHub and pipes it directly to bash, then changes that tool's configuration. Although an opt-out exists, the default install path performs this foreign user-environment mutation automatically.

AI rationale

The package uses an automatic install hook to execute a remotely fetched shell installer and configure a separate AI-related tool in the user's environment. This is an unconsented lifecycle mutation of a foreign control surface.

Evidence

package.jsonpostinstall.mjs

Network endpoints1

github.com/git-ai-project/git-ai/releases/download/${GIT_AI_VERSION}/install.sh

@cubic-dev-ai/cli@1.14.2

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code