@lovrabet/rabetbase-cli@2.5.6
Developer CLI for Lovrabet apps, datasets, pages, SQL, Backend Function, database connections, skills, and AI agent workflows.
AI Security Review
scanned 9d ago · by lpm-firewall-aiThe verified install hook automatically installs a global, package-owned agent skill, which fits the warning-only agent extension lifecycle risk. The flagged routing file contains obfuscated regional service profiles in the inspected excerpt, not evidence of executable payload loading.
Decision evidence
public snapshot- package.json runs scripts/postinstall.mjs during postinstall.
- The hook imports lib/postinstall.js and calls runPostinstall().
- The installer calls runNpxSkillsAddGlobal() for the bundled skill.
- The helper runs npx with skills@latest, -g, and -y by default; an environment variable can skip it.
- The skill manifest identifies the installed skill as rabetbase from this package and version.
- The obfuscated routing module defines regional service-domain profiles; the inspected excerpt does not show a payload loader.
- The install behavior is limited to setting up this package’s named skill; inspected excerpts do not establish broad agent configuration changes, credential transfer, or arbitrary payload execution.
Source & flagged code
4 flagged · loading sourcePackage defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgPackage source references dynamic require/import behavior.
scripts/postinstall.mjsView on unpkg · L17Findings
Affected versions and remediation
This report applies to @lovrabet/rabetbase-cli@2.5.6.
See all versions of @lovrabet/rabetbase-cli for other recorded verdicts.
- Review the evidence and your use of @lovrabet/rabetbase-cli@2.5.6 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.