registry / @dat999zx/knowl / 1.0.0

@dat999zx/knowl@1.0.0

A Knowledge Operating System for AI Agents

AI Security Review

scanned 21h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

No blocking static signals were detected.

Trigger

User runs `knowl init` with selected agents, or invokes `knowl skill run`.

Impact

Can persist Knowl instructions and hook commands in a selected project's AI-agent configuration.

Mechanism

User-invoked project agent integration and skill-command execution.

Rationale

This is a user-invoked AI-agent integration package with persistent project configuration and command execution capability, not concrete malware. Its agent-control writes warrant a warning under the stated policy.

Evidence

package.jsondist/index.jsdist/chunk-NHCDKQK3.jsREADME.md<project>/.knowl/<project>/AGENTS.md<project>/.gitignore<project>/.codex/config.toml<project>/.codex/hooks.json<project>/.claude/settings.local.json<project>/.mcp.json<project>/.cursor/mcp.json<project>/.cursor/hooks.json

@dat999zx/knowl@1.0.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code