registry / @promptster/teams-cli / 0.9.1

@promptster/teams-cli@0.9.1

On-device, auditable AI-coding capture for internal engineering teams

AI Security Review

scanned 5h ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. A global npm install persists a package-owned executable under `~/.promptster-teams/bin/` and invokes its autostart-repair subcommand. The launcher later prefers that managed executable. No confirmed exfiltration or foreign AI-agent control-surface mutation appears in inspected JavaScript.

Static reason

One or more suspicious static signals were detected.

Trigger

Global `npm install` activates postinstall; invoking `promptster-teams` activates the launcher.

Impact

Creates or refreshes a persistent package-owned CLI binary; the opaque platform binary may repair an existing login service.

Mechanism

Package-owned binary installation and existing autostart-service repair.

Rationale

No concrete malicious chain is established in the inspected source, but install-time persistence-adjacent binary deployment and autostart repair create a real lifecycle risk. Flag for warning rather than blocking because the mutation is package-owned and no theft, remote execution, or foreign control-surface write is shown.

Evidence

package.jsonscripts/postinstall.jslib/resolve.jsbin/promptster-teams.jsREADME.md~/.promptster-teams/bin/promptster-teams

Decision evidence

public snapshot

AI called this Suspicious at 82.0% confidence with false-positive risk.

@promptster/teams-cli@0.9.1

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code