Loading npm security reports…

@lovrabet/rabetbase-cli@2.5.3: AI-agent control-surface risk | LPM Firewall

registry / @lovrabet/rabetbase-cli / 2.5.3

@lovrabet/rabetbase-cli@2.5.3

Developer CLI for Lovrabet apps, datasets, pages, SQL, Backend Function, database connections, skills, and AI agent workflows.

AI Security Review

scanned 25d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Installing the package automatically installs a remote AI skill globally. The package obtains the installer at the latest version and suppresses interactive confirmation.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm postinstall during package installation

Impact

A remote skill can be added to shared agent skill directories and influence compatible AI-agent environments.

Mechanism

automatic non-interactive global AI skill installation through npx

Policy narrative

On installation, the postinstall script loads the bundled lifecycle module. That module invokes npx with skills@latest to add lovrabet/rabetbase globally using -y flags. The installer is remote, unpinned, and non-interactive, and the package checks shared agent skill directories under the user home directory. This changes AI-agent control surfaces without an explicit user command.

AI rationale

This is an unconsented install-time mutation of a broad AI-agent control surface through a remote, latest-version installer. The lifecycle implementation is also deliberately obfuscated.

Evidence

package.jsonscripts/postinstall.mjslib/skills/npx-skills-add.d.tslib/postinstall.jslib/skills/builtin-skill.jslib/skills/npx-skills-add.js~/.agents/skills/rabetbase/SKILL.md~/.claude/skills/rabetbase/SKILL.md~/.agents/.skill-lock.json

Source & flagged code

4 flagged

package.jsonView file

Lines 57-97json

57 "verify:release-package": "node scripts/verify-release-package.mjs",

58 "beta-release": "node scripts/beta-release.mjs",

59 "release": "node scripts/latest-release.mjs",

60 "test": "vitest run",

61 "test:run": "vitest run",

62 "test:coverage": "vitest run --coverage",

63 "test:ui": "vitest --ui",

64 "test:watch": "vitest --watch",

65 "test:unit": "vitest run test/unit",

66 "test:app": "vitest run test/unit/commands/app-shared.test.ts test/unit/commands/workspace-add.test.ts test/unit/commands/workspace-remove.test.ts test/unit/commands/app-list.test.ts test/unit/commands/workspace.test.ts test/unit/commands/app-workspace-migration.test.ts",

67 "test:integration": "vitest run test/integration",

68 "test:e2e": "vitest run test/e2e",

69 "test:e2e:daily": "RABETBASE_E2E_DAILY=1 vitest run test/e2e/daily-app-smoke.test.ts",

70 "test:windows": "node test/run-windows-tests.js",

71 "test:windows:unit": "node test/run-windows-tests.js unit",

72 "test:windows:integration": "node test/run-windows-tests.js integration",

73 "typecheck": "tsc --noEmit",

74 "publish:github": "node scripts/publish-github.mjs",

75 "generate:builtin-skill-manifest": "node scripts/generate-builtin-skill-manifest.mjs",

76 "check:builtin-skill-manifest": "node scripts/generate-builtin-skill-manifest.mjs --check",

77 "postinstall": "node scripts/postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L77

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L77

78 "lint": "echo 'No linter configured yet'",

79 "check:skill-version": "node scripts/check-skill-version.mjs",

80 "check:lockfile": "node scripts/check-lockfile-integrity.mjs",

81 "ci": "npm run typecheck && npm run check:skill-version && npm run test:run && npm run build"

82 },

83 "publishConfig": {

84 "access": "public"

85 },

86 "files": [

87 "lib",

88 "skills/rabetbase",

89 "skills/rabetbase.manifest.json",

90 "scripts/postinstall.mjs",

91 "templates/custom-pages",

92 "templates/generate-api",

93 "sidecar",

94 "README.md",

95 "LICENSE"

96 ],

97 "dependencies": {

scripts/postinstall.mjsView file

Lines 1-25javascript

1#!/usr/bin/env node

2import { existsSync } from "node:fs";

3import { dirname, join, resolve } from "node:path";

4import { fileURLToPath, pathToFileURL } from "node:url";

5

6const

lib/generated/official-routing.jsView file

Lines 1-1javascript

1const a312_0x4c8e93=a312_0x5e24;(function(_0x13a9e1,_0x4c7b5f){const _0x366462=a312_0x5e24,_0xcf3ce1=_0x13a9e1();while(!![]){try{const