registry / @customerio/cli / 0.0.25

@customerio/cli@0.0.25

Agent-first CLI for Customer.io APIs

AI Security Review

scanned 3d ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. Installing the package automatically invokes a platform-specific Customer.io CLI to install an agent skill. The exact binary and resulting files are not included in this snapshot.

Static reason

One or more suspicious static signals were detected.

Trigger

npm installation, via postinstall

Impact

May add a Customer.io skill to project or global AI-agent configuration locations without an explicit cio command.

Mechanism

automatic launch of a skills installer with project or global scope

Rationale

This is a real automatic AI-agent extension lifecycle action, but the inspected source shows no exfiltration, destructive behavior, remote payload loading, or self-dependency chain. It warrants a warning rather than a block under the first-party agent-extension policy.

Evidence

package.json.npm/postinstall.js

Decision evidence

public snapshot

AI called this Suspicious at 90.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

The package has an automatic postinstall lifecycle hook.
Postinstall selects global or project scope from the npm install context.
Postinstall launches the platform CLI with a skills-install command, which can modify AI-agent skill locations without an explicit command from the user.

@customerio/cli@0.0.25

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code