registry / @getfrontline/cli / 1.6.1

@getfrontline/cli@1.6.1

Frontline CLI — Public API (agents, workflows, billing, tables, objects) + Max chat/admin REST from your terminal

AI Security Review

scanned 6d ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. Installation automatically adds package-provided Frontline skills to Claude Code. This creates a guarded agent extension lifecycle risk, but inspected source does not establish a malicious attack.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

npm postinstall when Claude Code is detected.

Impact

New or unchanged package skills become available to Claude Code without a separate setup command; no confirmed exfiltration or broad control hijack was identified.

Mechanism

The lifecycle wrapper launches a program that copies bundled skills and records hashes, preserving customized installations.

AI rationale

Direct inspection establishes guarded installation of package-owned agent skills rather than the scanner's implied malware finding. Under the supplied lifecycle policy, this behavior warrants a warning without publication blocking.

Evidence

package.jsonscripts/runPostinstall.mjsdist/scripts/postinstall.js.claudeskillsSKILL.md.frontline-hash

Decision evidence

public snapshot

AI called this Suspicious at 94.0% confidence as Dangerous Capability with false-positive risk.

@getfrontline/cli@1.6.1

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code