registry / @dujavi/ai-md / 0.5.0

@dujavi/ai-md@0.5.0

AXI-shaped CLI for a private ~/.ai-md: system skills/rules, templates, projects, and private script runner for agent harnesses (Cursor, Claude, agents)

AI Security Review

scanned 11h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs `ai-md install`, `setup`, `doctor --fix`, or `script`.

Impact

A user-selected private repository or script can affect linked agent instructions on that user's machine.

Mechanism

Explicit agent-config symlinking, Git synchronization, and private-script execution.

Rationale

Source establishes an explicit-user-command agent configuration and script-runner capability, which warrants a warning under the supplied policy. It does not establish malicious behavior.

Evidence

package.jsonbin/ai-md.jslib/commands.jslib/scripts.jslib/config.jsscripts/sync-config.sh~/.config/ai-md/config.json~/.ai-md~/.cursor/skills~/.cursor/rules~/.claude/skills~/.agents/skills<user-repo>/.cursor<user-repo>/.gitignore

Network endpoints1

github.com/dujavi/.ai-md.git

@dujavi/ai-md@0.5.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code