registry / @darkrei08/wizard-ai-cli / 0.50.46

@darkrei08/wizard-ai-cli@0.50.46

Installer for the Wizard-AI environment: AI CLI tools and Claude Code skills (graphify, llmlingua, flashrank, markitdown and more). Clones the repo and runs the platform setup script.

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs wizard-ai, especially wizard-ai proxy enable or pi-config.

Impact

Unreviewed remote repository code gains elevated execution; opt-in proxy setup redirects Pi Google-provider traffic through localhost.

Mechanism

Remote installer execution plus explicit AI-agent proxy configuration and daemon setup.

Rationale

The package is not confirmed malicious, but it is a user-invoked remote-code installer with AI-agent control-surface mutation and persistence. Warn so users can review the external setup and proxy components before running them.

Evidence

package.jsoncli.jsscripts/wz-ai-proxy.jsscripts/wizard-installer.jsscripts/repo-registry.json~/.wizard-ai/setup.sh~/.pi/agent/auth.json~/.pi/agent/models.json~/.config/systemd/user/wz-ai-proxy.service

Network endpoints2

github.com/darkrei08/Wizard-AI.git127.0.0.1:51200/v1beta

@darkrei08/wizard-ai-cli@0.50.46

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code