Loading npm security reports…
Agent-first CLI for Customer.io APIs
LPM treats this as warn-only first-party agent extension lifecycle risk. Installing the package automatically launches a platform-specific Customer.io binary to install agent skills. The binary is not included in this snapshot, so the resulting files cannot be verified here.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgThe postinstall hook automatically runs the bundled CLI's skills installer.
package.jsonView on unpkg · L5For local installs it changes the child process directory to the consumer project and passes --project.
.npm/postinstall.jsView on unpkg · L46For global installs it passes --global, allowing agent-skill setup outside the package directory.
.npm/postinstall.jsView on unpkg · L46Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L9Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L9The postinstall hook automatically runs the bundled CLI's skills installer.
package.jsonView on unpkg · L5For local installs it changes the child process directory to the consumer project and passes --project.
.npm/postinstall.jsView on unpkg · L46For global installs it passes --global, allowing agent-skill setup outside the package directory.
.npm/postinstall.jsView on unpkg · L46