registry / @deksden-com/dd-flow-cli / 0.3.1

@deksden-com/dd-flow-cli@0.3.1

Mechanical runtime CLI for dd-flow workflows.

AI Security Review

scanned 3h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs `dd-flow codex home init` or `dd-flow codex hooks install`; default target additionally requires `--yes`.

Impact

Installed hooks can observe or block configured Codex workflow events for the selected project.

Mechanism

User-invoked Codex hook and isolated-home configuration

Rationale

The package is not malicious by source evidence, but its explicit user-invoked Codex hook management changes an AI-agent control surface. Downgrade to warn under the capability policy.

Evidence

package.jsondist/cli.jsdist/cli/run-cli.jsdist/services/hooks.jsdist/services/engines.js$DD_FLOW_HOME/codex-homes/<profile>/config.toml$DD_FLOW_HOME/codex-homes/<profile>/hooks.json$CODEX_HOME/hooks.json

Decision evidence

public snapshot

AI called this Suspicious at 88.0% confidence with false-positive risk.

@deksden-com/dd-flow-cli@0.3.1

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code