registry / @lovrabet/lovrabet-cli / 2.3.4
@lovrabet/lovrabet-cli@2.3.4
Runtime CLI for Lovrabet apps, datasets, SQL, Backend Function, skills, and AI agent workflows.
AI Security Review
scanned 28d ago · by lpm-firewall-aiThe source shows automatic first-party agent-skill installation through an external latest npx tool. This is a concrete lifecycle risk but does not prove malicious behavior or a block-level attack.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
npm postinstall during package installation.
Impact
This can change AI-agent skill configuration without an explicit CLI command. No credential theft, destructive action, or confirmed broad control-surface write was identified from the inspected source.
Mechanism
The postinstall loader calls the built-in skill installer, which starts npx for a global skills add operation.
AI rationale
The source shows automatic first-party agent-skill installation through an external latest npx tool. This is a concrete lifecycle risk but does not prove malicious behavior or a block-level attack.
Evidence
package.jsonscripts/postinstall.mjslib/postinstall.jslib/skills/builtin-skill.jslib/skills/npx-skills-add.js
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package declares an automatic post-install hook.
- The hook dynamically loads the package post-install module, which invokes built-in skill installation.
- The built-in skill installer invokes an external global skills installer through npx.
- The update command uses a shell-disabled child-process call.
- Routing contains only Lovrabet service URLs in the inspected excerpt.
- Artifact input is passed through source validation before use.
Evidence against
- The automatic installer uses an external latest-version tool, so its final agent targets and code are not fully constrained by this package.
- Published library files are deliberately obfuscated, limiting direct auditability.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinifiedObfuscated
Source & flagged code
7 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/postinstall.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.mjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkglib/commands/update.jsView file
1function a85_0x2310(){const _0x1891d0=['expected\x20','\x20\x20Restart\x20your\x20terminal\x20to\x20use\x20the\x20new\x20version.','latest','update',']:\x20','repairCommand','node_...
High
Findings
7 High5 Medium4 Low
HighInstall Time Lifecycle Scriptspackage.json
HighChild Process
HighShelllib/commands/update.js
HighSame File Env Network Executionlib/commands/update.js
HighObfuscated Payload Loaderlib/generated/official-routing.js
HighObfuscated
HighSemantic Analysis Limitedlib/commands/artifact/index.js#virtual:normalized:round1
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumDynamic Requirescripts/postinstall.mjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
Affected versions and remediation
This report applies to @lovrabet/lovrabet-cli@2.3.4.
See all versions of @lovrabet/lovrabet-cli for other recorded verdicts.
- Review the evidence and your use of @lovrabet/lovrabet-cli@2.3.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.