registry / @mozartec/mos-cli / 0.6.0

@mozartec/mos-cli@0.6.0

The mos CLI: serve any vault's board and wiki locally (`mos serve`), scaffold a new vault (`mos init`), and validate one (`mos validate`). Read-only over existing vaults; ships the built web app bundled with the vault endpoints in one Node process.

AI Security Review

scanned 10h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs `mos init [dir]`.

Impact

Can establish project-local AI-agent operating instructions.

Mechanism

User-invoked project scaffold writes AI-agent guidance files.

Rationale

Source confirms an explicit-command agent-guidance scaffold but no lifecycle execution, external network activity, exfiltration, or destructive behavior. Policy classifies this capability as warn-level.

Evidence

package.jsonbin/mos.mjsdist/main.jsREADME.mdAGENTS.md.mos/AGENTS.md.mos/config.jsonboard/T-001-explore-the-board.md

Network endpoints1

127.0.0.1

Decision evidence

public snapshot

AI called this Suspicious at 94.0% confidence as Dangerous Capability with false-positive risk.

@mozartec/mos-cli@0.6.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code