registry / @getfrontline/cli / 1.3.0

@getfrontline/cli@1.3.0

Frontline CLI — Public API (agents, workflows, billing, tables, objects) + Max chat/admin REST from your terminal

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. On installation, the package conditionally installs its bundled Frontline skills into an existing Claude Code skills directory. No confirmed exfiltration, remote payload, or destructive action was found.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

npm postinstall when Claude Code is detected

Impact

Modifies a foreign AI-agent skill control surface with package-provided instructions.

Mechanism

guarded first-party Claude Code skill installation

AI rationale

The package has a guarded install-time mutation of Claude Code's skills directory, which warrants a lifecycle-risk warning under policy. Source inspection found no credential theft, exfiltration, downloaded code, or destructive behavior.

Evidence

package.jsonscripts/runPostinstall.mjsdist/scripts/postinstall.jsdist/commands/setup/claudeSkills.jsdist/skills/frontline-agents/SKILL.md~/.claude/skills/frontline-agents/SKILL.md

Decision evidence

public snapshot

AI called this Suspicious at 89.0% confidence as Benign with low false-positive risk.

@getfrontline/cli@1.3.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code