registry / @lovrabet/lovrabet-cli / 2.3.5
@lovrabet/lovrabet-cli@2.3.5
Runtime CLI for Lovrabet apps, datasets, SQL, Backend Function, skills, and AI agent workflows.
AI Security Review
scanned 7d ago · by lpm-firewall-aiThe package automatically sets up its own Lovrabet skill for global agent targets during postinstall, which presents lifecycle risk. The inspected behavior supports a warning, but does not establish a concrete attack warranting a block.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Installing the npm package runs its postinstall hook.
Impact
The install may add the package’s skill to global agent skill targets without a separate setup command.
Mechanism
The hook calls the built-in skill installer, which invokes the skills CLI with global and automatic confirmation options for the Lovrabet skill.
AI rationale
The package automatically sets up its own Lovrabet skill for global agent targets during postinstall, which presents lifecycle risk. The inspected behavior supports a warning, but does not establish a concrete attack warranting a block.
Evidence
package.jsonscripts/postinstall.mjslib/postinstall.jslib/skills/builtin-skill.jslib/skills/npx-skills-add.js
Decision evidence
public snapshotAI called this Suspicious at 83.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- package.json runs a postinstall script that imports and calls the package’s postinstall handler.
- The handler calls the built-in skill installer during postinstall.
- The installer runs `npx skills@latest add` with global and yes flags, setting up the package’s Lovrabet skill.
- The update command installs a selected Lovrabet CLI version when the user invokes that command.
Evidence against
- The inspected sources establish first-party Lovrabet skill setup, not a broader agent settings change, credential transfer, or destructive action.
- The flagged routing file defines Lovrabet service-region profiles and URLs.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinifiedObfuscatedUrlStrings
Source & flagged code
6 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/postinstall.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.mjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkglib/commands/update.jsView file
1const a86_0x21f3a4=a86_0x49de;(function(_0x1ad3ed,_0x30408d){const _0x308756=a86_0x49de,_0x4a4082=_0x1ad3ed();while(!![]){try{const _0x23d078=-parseInt(_0x308756(0xe3))/0x1+parseIn...
High
Findings
6 High5 Medium4 Low
HighInstall Time Lifecycle Scriptspackage.json
HighChild Process
HighShelllib/commands/update.js
HighSame File Env Network Executionlib/commands/update.js
HighObfuscated Payload Loaderlib/generated/official-routing.js
HighObfuscated
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumDynamic Requirescripts/postinstall.mjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @lovrabet/lovrabet-cli@2.3.5.
See all versions of @lovrabet/lovrabet-cli for other recorded verdicts.
- Review the evidence and your use of @lovrabet/lovrabet-cli@2.3.5 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.