registry / @lovrabet/lovrabet-cli / 2.3.0
@lovrabet/lovrabet-cli@2.3.0
Runtime CLI for Lovrabet apps, datasets, SQL, Backend Function, skills, and AI agent workflows.
AI Security Review
scanned 29d ago · by lpm-firewall-aiThis is a guarded first-party agent-extension setup rather than a confirmed attack, so it warrants a warning. Automatic use of an unpinned external installer at postinstall prevents a clean verdict.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
npm postinstall
Impact
This can execute externally resolved installer code and modify global AI-agent skill locations.
Mechanism
The lifecycle loader calls the built-in skill installer, which spawns npx with skills@latest and global-install arguments.
AI rationale
This is a guarded first-party agent-extension setup rather than a confirmed attack, so it warrants a warning. Automatic use of an unpinned external installer at postinstall prevents a clean verdict.
Evidence
package.jsonscripts/postinstall.mjslib/postinstall.jslib/skills/builtin-skill.jslib/skills/npx-skills-add.jslib/skills/skill-presence.js.agents/.skill-lock.json.agents/skills/lovrabet/SKILL.md.claude/skills/lovrabet/SKILL.md
Decision evidence
public snapshotAI called this Suspicious at 90.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package runs a postinstall lifecycle script.
- The postinstall loader imports and awaits the built-in skill installer.
- The installer launches unpinned skills@latest globally through npx.
Evidence against
- No credential collection, exfiltration, or destructive action was identified in the inspected lifecycle chain.
- The configured skill source is the package's own Lovrabet skill, not an unrelated source.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinifiedObfuscatedUrlStrings
Source & flagged code
6 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/postinstall.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.mjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkglib/commands/update.jsView file
1const a84_0x1daedc=a84_0x4ee6;(function(_0x52cf2d,_0x13f684){const _0x14cd12=a84_0x4ee6,_0x2e6085=_0x52cf2d();while(!![]){try{const _0x39641f=-parseInt(_0x14cd12(0x12f))/0x1+parseI...
High
Child Process
Package source references child process execution.
lib/commands/update.jsView on unpkg · L1Findings
6 High5 Medium4 Low
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processlib/commands/update.js
HighShell
HighSame File Env Network Executionlib/commands/update.js
HighObfuscated Payload Loaderlib/generated/build-info.js
HighObfuscated
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumDynamic Requirescripts/postinstall.mjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @lovrabet/lovrabet-cli@2.3.0.
See all versions of @lovrabet/lovrabet-cli for other recorded verdicts.
- Review the evidence and your use of @lovrabet/lovrabet-cli@2.3.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.