registry / @ibm/ixora / 0.6.5

@ibm/ixora@0.6.5

CLI for managing ixora AI agent deployments on IBM i

AI Security Review

scanned 10h ago · by lpm-firewall-ai

No confirmed malicious attack surface. The package is a management CLI for Ixora/AgentOS that performs network, filesystem, Docker, git, and skills installation operations only through user-invoked commands.

Static reason

No blocking static signals were detected.

Trigger

User runs `ixora` commands such as `stack install`, `workspace create`, `agentos add`, or `skills install`.

Impact

Local Ixora configuration and containers/workspaces may be created or changed as requested by the user; no unconsented install-time mutation or exfiltration found.

Mechanism

Explicit CLI orchestration for Ixora stack, AgentOS APIs, workspaces, and first-party skill installation

Rationale

Source inspection shows a legitimate IBM i/Ixora management CLI with explicit user-invoked operations and first-party skills, not install-time or import-time compromise. Suspicious primitives are aligned with stack deployment and AgentOS management and lack evidence of stealth, exfiltration, persistence, or foreign agent control hijacking.

Evidence

package.jsondist/index.jsdist/chunk-QRZMYYRN.jsdist/chunk-ODW7GXHU.jsdist/chunk-GSCAU3MP.jsplugins/use-ixora/skills/use-ixora/SKILL.mdplugins/use-ixora/skills/build-ibmi-agent/SKILL.mdplugins/use-ixora/skills/build-ibmi-agent/scripts/container_ibmi.py~/.ixora/.env~/.ixora/ixora-systems.yaml~/.ixora/docker-compose.yml~/.ixora/profiles/<system>.yaml~/.ixora/config.yamlworkspace directories created by `ixora workspace create`

Network endpoints7

ghcr.io/tokenghcr.io/v2ghcr.io/ibmi-agi/ixora-apigithub.com/ibmi-agi/ibmi-agentos-dockergithub.com/ibmi-agi/ibmi-agentos-openshiftibmi-agi/ixora-cliuser-supplied AgentOS/OpenAI-compatible/Ollama URLs

Decision evidence

public snapshot

AI called this Clean at 90.0% confidence as Benign with low false-positive risk.

Evidence for block

CLI can install first-party skills only via explicit `ixora skills install`, running `npx skills@1.5.13 add ibmi-agi/ixora-cli`.
User commands write local Ixora state under `~/.ixora` and can run Docker/Podman, git clone, and npx as part of stack/workspace/skills management.

Evidence against

`package.json` has no preinstall/install/postinstall hooks; only `prepublishOnly` build script.
`dist/index.js` is a commander CLI; privileged behavior is behind explicit commands such as `stack install`, `workspace create`, and `skills install`.
Network use is package-aligned: AgentOS user-specified URLs, GHCR image metadata, GitHub starter repos, local Ollama/OpenAI-compatible checks.
Secrets are prompted and stored locally in `~/.ixora/.env` with mode 0600; no source evidence of credential exfiltration.
Dynamic imports/Jiti load user workspace infra config for explicit workspace/infra commands, not at install/import time.
Bundled plugin skill files are documentation and a container helper for explicit IBM i introspection; no automatic agent control-surface mutation.

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 14 file(s), 508 KB of source, external domains: 127.0.0.1, 172.17.0.1, ghcr.io, github.com, host.docker.internal

Source & flagged code

2 flagged

dist/index.jsView file

Lines 1782-1822javascript

1782}

1783var chatCommand = new Command3("chat").description("Interactive chat TUI: stream agent/team/workflow runs").addOption(

1784 new Option2("--agent <id>", "chat with this agent").conflicts([

1785 "team",

1786 "workflow"

1787 ])

1788).addOption(

1789 new Option2("--team <id>", "chat with this team").conflicts([

1790 "agent",

1791 "workflow"

1792 ])

1793).addOption(

1794 new Option2("--workflow <id>", "run this workflow").conflicts([

1795 "agent",

1796 "team"

1797 ])

1798).option("--session <id>", "resume an existing session").option(

1799 "--bypass-confirmations",

1800 "auto-approve confirmation-gated tools (demo mode)"

1801).action(async (opts, cmd) => {

1802 const [{ applyColorMode, buildChatTheme }, { ChatApp }, { ChatController }] = await Promise.all([

1803 import("./theme-3UUPKAEB.js"),

1804 import("./app-I7E66JUW.js"),

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L1802

1805 import("./runner-FKVD4KQY.js")

1806 ]);

1807 const globals = cmd.optsWithGlobals();

1808 applyColorMode(globals.color !== false);

1809 if (!process.stdin.isTTY || !process.stdout.isTTY) {

1810 writeError(

1811 "'ixora chat' requires an interactive terminal. For scripted runs use `ixora agents run`."

1812 );

1813 process.exitCode = 1;

1814 return;

1815 }

1816 const flags = {

1817 system: typeof globals.system === "string" ? globals.system : void 0,

1818 url: typeof globals.url === "string" ? globals.url : void 0,

1819 key: typeof globals.key === "string" ? globals.key : void 0,

1820 timeout: typeof globals.timeout === "number" ? globals.timeout : void 0

1821 };

1822 let ctx;

plugins/use-ixora/skills/build-ibmi-agent/scripts/container_ibmi.pyView file

•path = plugins/use-ixora/skills/build-ibmi-agent/scripts/container_ibmi.py kind = build_helper sizeBytes = 16396 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

plugins/use-ixora/skills/build-ibmi-agent/scripts/container_ibmi.pyView on unpkg

Source & flagged code

2 flagged · loading source

dist/index.jsView file

1802const [{ applyColorMode, buildChatTheme }, { ChatApp }, { ChatController }] = await Promise.all([ L1803: import("./theme-3UUPKAEB.js"), L1804: import("./app-I7E66JUW.js"),

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L1802

plugins/use-ixora/skills/build-ibmi-agent/scripts/container_ibmi.pyView file

•path = plugins/use-ixora/skills/build-ibmi-agent/scripts/container_ibmi.py kind = build_helper sizeBytes = 16396 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

plugins/use-ixora/skills/build-ibmi-agent/scripts/container_ibmi.pyView on unpkg

Findings

5 Medium5 Low

MediumDynamic Requiredist/index.js

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperplugins/use-ixora/skills/build-ibmi-agent/scripts/container_ibmi.py

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

2 flagged

dist/index.jsView file

Lines 1782-1822javascript

1782}

1783var chatCommand = new Command3("chat").description("Interactive chat TUI: stream agent/team/workflow runs").addOption(

1784 new Option2("--agent <id>", "chat with this agent").conflicts([

1785 "team",

1786 "workflow"

1787 ])

1788).addOption(

1789 new Option2("--team <id>", "chat with this team").conflicts([

1790 "agent",

1791 "workflow"

1792 ])

1793).addOption(

1794 new Option2("--workflow <id>", "run this workflow").conflicts([

1795 "agent",

1796 "team"

1797 ])

1798).option("--session <id>", "resume an existing session").option(

1799 "--bypass-confirmations",

1800 "auto-approve confirmation-gated tools (demo mode)"

1801).action(async (opts, cmd) => {

1802 const [{ applyColorMode, buildChatTheme }, { ChatApp }, { ChatController }] = await Promise.all([

1803 import("./theme-3UUPKAEB.js"),

1804 import("./app-I7E66JUW.js"),

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L1802

1805 import("./runner-FKVD4KQY.js")

1806 ]);

1807 const globals = cmd.optsWithGlobals();

1808 applyColorMode(globals.color !== false);

1809 if (!process.stdin.isTTY || !process.stdout.isTTY) {

1810 writeError(

1811 "'ixora chat' requires an interactive terminal. For scripted runs use `ixora agents run`."

1812 );

1813 process.exitCode = 1;

1814 return;

1815 }

1816 const flags = {

1817 system: typeof globals.system === "string" ? globals.system : void 0,

1818 url: typeof globals.url === "string" ? globals.url : void 0,

1819 key: typeof globals.key === "string" ? globals.key : void 0,

1820 timeout: typeof globals.timeout === "number" ? globals.timeout : void 0

1821 };

1822 let ctx;

plugins/use-ixora/skills/build-ibmi-agent/scripts/container_ibmi.pyView file

•path = plugins/use-ixora/skills/build-ibmi-agent/scripts/container_ibmi.py kind = build_helper sizeBytes = 16396 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

plugins/use-ixora/skills/build-ibmi-agent/scripts/container_ibmi.pyView on unpkg