@customerio/cli@0.0.31

Agent-first CLI for Customer.io APIs

AI Security Review

scanned 9d ago · by lpm-firewall-ai

The postinstall hook automatically invokes first-party agent skill setup, which warrants a warning under the agent extension lifecycle policy. The inspected package source does not establish a concrete malicious action or a broader control-surface attack.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review

Trigger

Installing the npm package, which runs its postinstall hook.

Impact

The installation can write the Customer.io skill into project or global agent skill directories without a separate invocation of the CLI command.

Mechanism

The hook selects project or global scope and invokes the platform CLI with `skills install`.

AI rationale

Evidence

package.json.npm/postinstall.js./.claude./.agents~/.claude~/.agents

Decision evidence

public snapshot

AI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

The manifest registers a postinstall hook that runs the package’s installer script.
The hook selects project or global scope and uses the installer's project directory for project installs.
The hook launches the platform CLI with the `skills install` command automatically.
The package describes the installed content as a Customer.io bootstrap skill for agent skill directories.
The included launcher forwards commands to a platform-specific binary; its implementation is not present in this package snapshot.

Evidence against

The documented setup is for the package’s own Customer.io agent skill, with project or global scope selected by the install type.
The inspected JavaScript delegates to the platform binary and does not establish credential collection or unrelated remote behavior.

Behavioral surface

SourceNo risky source behavior triggered.

Supply chainNo supply-chain packaging signals triggered.

Manifest

NoLicense

scanned 0 file(s), 0 B of source

Source & flagged code

9 flagged

package.jsonView file

Lines 1-29json

2 "name": "@customerio/cli",

3 "version": "0.0.31",

4 "description": "Agent-first CLI for Customer.io APIs",

5 "bin": {

6 "cio": ".npm/run.js"

7 },

8 "scripts": {

9 "postinstall": "node .npm/postinstall.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L9

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L9

10 },

11 "files": [

12 ".npm/run.js",

Medium

Suspicious Lifecycle Evidence

The manifest registers a postinstall hook that runs the package’s installer script.

package.jsonView on unpkg · L1

13 ".npm/postinstall.js",

14 "LICENSE",

15 "README.md"

16 ],

17 "optionalDependencies": {

18 "@customerio/cli-darwin-arm64": "0.0.31",

19 "@customerio/cli-darwin-x64": "0.0.31",

20 "@customerio/cli-linux-arm64": "0.0.31",

21 "@customerio/cli-linux-x64": "0.0.31",

22 "@customerio/cli-win32-arm64": "0.0.31",

23 "@customerio/cli-win32-x64": "0.0.31"

24 },

25 "publishConfig": {

26 "access": "public",

27 "provenance": true

28 },

29 "customerioCli": {

.npm/postinstall.jsView file

Lines 29-70javascript

29let platformPackageRoot;

30try {

31 platformPackageRoot = path.dirname(

32 require.resolve(`${platformPackage}/package.json`, { paths: [pkgRoot] })

33 );

34} catch {

README.mdView file

Lines 34-74markdown

34```bash

35rm -rf ~/.cio

36```

38## Install the agent skill

40This repo ships a [SKILL.md](skills/cio/SKILL.md) so Claude Code, Cursor, Codex, Windsurf, and other agents that support [open agent skills](https://github.com/vercel-labs/skills) know how to drive the CLI.

.npm/run.jsView file

Lines 31-71javascript

31}

33try {

34 platformPackageRoot = path.dirname(

35 require.resolve(`${platformPackage}/package.json`, { paths: [pkgRoot] })

36 );

37} catch {

Source & flagged code

9 flagged · loading source

package.jsonView file

•scripts.postinstall = node .npm/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node .npm/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

1{ "name": "@customerio/cli", "version": "0.0.31", "description": "Agent-first CLI for Customer.io APIs", "bin": { "cio": ".npm/run.js" }, "scripts": { "postinstall": "node .npm/postinstall.js" }, "files": [ ".npm/run.js", ".npm/postinstall.js", "LICENSE", "REA

Medium

Suspicious Lifecycle Evidence

The manifest registers a postinstall hook that runs the package’s installer script.

package.jsonView on unpkg · L1

.npm/postinstall.js

Findings

3 High6 Medium2 Low

HighInstall Time Lifecycle Scriptspackage.json

HighKnown Malware Source Similarity.npm/postinstall.js

HighKnown Malware Source Fingerprint Signature.npm/postinstall.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumSuspicious Lifecycle Evidencepackage.json

MediumAi Review Evidence.npm/postinstall.js

MediumAi Review EvidenceREADME.md

MediumAi Review Evidence.npm/run.js

LowScripts Present

LowNo License

Affected versions and remediation

This report applies to @customerio/cli@0.0.31.

See all versions of @customerio/cli for other recorded verdicts.

Review the evidence and your use of @customerio/cli@0.0.31 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-14 09:53:00.837Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.