registry / @getfrontline/cli / 1.6.2

@getfrontline/cli@1.6.2

Frontline CLI — Public API (agents, workflows, billing, tables, objects) + Max chat/admin REST from your terminal

AI Security Review

scanned 6d ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. Installation automatically adds or upgrades Frontline skills in Claude Code's user configuration. This creates guarded agent extension lifecycle risk, but inspected source does not establish a malicious attack.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

npm postinstall when Claude Code is detected.

Impact

Package-supplied instructions become available to the agent without a separate setup command; existing customized skills are protected.

Mechanism

The wrapper launches the bundled installer, which copies package skills and records hashes while preserving customized files.

AI rationale

Source establishes guarded first-party agent extension installation, which the review policy classifies as warning-only. Scanner similarity and browser-login hints do not establish malicious behavior.

Evidence

package.jsonscripts/runPostinstall.mjsdist/scripts/postinstall.js.claudeskillsSKILL.md.frontline-hash

Decision evidence

public snapshot

AI called this Suspicious at 94.0% confidence as Dangerous Capability with medium false-positive risk.

@getfrontline/cli@1.6.2

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code