registry / @customerio/cli / 0.0.20

@customerio/cli@0.0.20

Agent-first CLI for Customer.io APIs

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. npm installation automatically invokes a Customer.io binary to install its agent skill. This can modify project or global agent-skill directories without an explicit CLI command.

Static reason

One or more suspicious static signals were detected.

Trigger

npm postinstall, globally or in the invoking project

Impact

Adds Customer.io skill-routing content to .agents or .claude control surfaces.

Mechanism

install-time first-party agent-skill setup through platform binary

Rationale

This is an unconsented install-time, first-party agent-extension setup, not concrete malware. Source inspection found no direct exfiltration, destructive action, or remote-code chain in this package.

Evidence

package.json.npm/postinstall.js.npm/run.jsREADME.md.agents/skills/<name>/.claude/skills/<name>/

Decision evidence

public snapshot

AI called this Suspicious at 91.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

package.json defines postinstall.
.npm/postinstall.js runs the platform cio binary during install.

@customerio/cli@0.0.20

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code