registry / @getfrontline/cli / 1.8.0

@getfrontline/cli@1.8.0

Frontline CLI — Public API (agents, workflows, billing, tables, objects) + Max chat/admin REST from your terminal

AI Security Review

scanned 12h ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. The npm postinstall hook can install bundled Claude Code skills into the user’s Claude skills directory. This is first-party agent extension setup and presents lifecycle risk, but the inspected behavior does not establish a concrete malicious attack.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

Installing the package with npm when Claude Code is detected.

Impact

The installed skills become available to Claude Code; no exfiltration or broader control-surface mutation is established by the inspected behavior.

Mechanism

The postinstall module copies the package’s bundled skills into the Claude skills directory, using hashes to avoid overwriting customized files.

AI rationale

The package automatically installs its own bundled Claude Code skills during postinstall when Claude Code is detected. This matches first-party agent extension setup, which warrants a warning, while the inspected code provides no evidence of a concrete malicious chain.

Evidence

package.jsonscripts/runPostinstall.mjsdist/scripts/postinstall.js~/.claude/skills/

Decision evidence

public snapshot

AI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.

@getfrontline/cli@1.8.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code