registry / @expo/agent-cli / 1.0.15
@expo/agent-cli@1.0.15
Agent-native CLI on top of the Expo CLI family
AI Security Review
scanned 17d ago · by lpm-firewall-aiThe manifest contains no install hook, and the flagged agent configuration behavior is exposed through an explicit setup command that writes a managed project instructions block. The remaining inspected runtime excerpts concern local logging, WebSocket handling, device inspection, and skill follow-up behavior; they do not establish malicious activity.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user invokes the agents:setup CLI command.
Impact
The inspected behavior supports ordinary user-requested CLI setup, with no confirmed attack surface.
Mechanism
The command maintains a marked AGENTS.md block and selects conventional agent skill directories; the manifest has no install-time hook.
AI rationale
The manifest contains no install hook, and the flagged agent configuration behavior is exposed through an explicit setup command that writes a managed project instructions block. The remaining inspected runtime excerpts concern local logging, WebSocket handling, device inspection, and skill follow-up behavior; they do not establish malicious activity.
Decision evidence
public snapshotAI called this Clean at 90.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json defines the CLI entrypoints and only a prepublishOnly hook, which runs clean and builds the package.
- Agent setup is exposed as an explicit agents:setup command; its code writes a managed block to the project AGENTS.md file.
- The setup code targets agent skill directories, while the agent registry identifies conventional project and user configuration locations.
- The flagged runtime bytes implement local log rotation and a session event logger; the WebSocket excerpt handles protocol headers.
- Other flagged chunks implement Expo Go device inspection, skill-sync follow-up reporting, and local device probing.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
7 flaggedbuild/cli/824.index.jsView file
842const target = (0,windowsShim/* resolveSpawnTarget */.Z)(command.bin, command.args);
L843: const child = spawn(target.command, target.args, {
L844: stdio: ['ignore', fd ?? 'ignore', 'pipe'],
High
Child Process
Package source references child process execution.
build/cli/824.index.jsView on unpkg · L842build/cli/734.index.jsView file
5035L5036: module.exports = eval("require")("bufferutil");
L5037:
Low
Eval
Package source references a known benign dynamic code generation pattern.
build/cli/734.index.jsView on unpkg · L5035build/cli/index.jsView file
1#!/usr/bin/env node
L2: (()=>{var t={6712:(e,t,n)=>{"use strict";e=n.nmd(e);const wrapAnsi16=(e,t)=>(...n)=>{const r=e(...n);return`[${r+t}m`};const wrapAnsi256=(e,t)=>(...n)=>{const r=e(...n);return`[$...
Findings
1 Critical5 High3 Medium6 Low
CriticalPrevious Version Dangerous Deltabuild/cli/458.index.js
HighChild Processbuild/cli/824.index.js
HighSame File Env Network Executionbuild/cli/index.js
HighExternal Ai Agent Control Surface Mutationbuild/cli/248.index.js
HighRuntime Package Installbuild/cli/55.index.js
HighSemantic Analysis Limitedbuild/cli/193.index.js#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowEvalbuild/cli/734.index.js
LowFilesystem
Affected versions and remediation
This report applies to @expo/agent-cli@1.0.15.
See all versions of @expo/agent-cli for other recorded verdicts.
- Review the evidence and your use of @expo/agent-cli@1.0.15 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.