registry  /  @restoai/resto-datacli  /  0.2.0

@restoai/resto-datacli@0.2.0

`resto-datacli` is a deterministic command-line tool for restaurant reporting analysis workflows. It helps an agent sync report knowledge, discover reports and fields, validate explicit query plans, execute validated report API requests, and run determini

AI Security Review

scanned 2h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason
No blocking static signals were detected.
Trigger
User runs `resto install-skill` or other authenticated `resto` commands.
Impact
User-invoked agent configuration mutation and access to report data authorized by the locally stored CLI token.
Mechanism
Explicit AI-agent skill registration and authenticated report-service CLI requests.
Rationale
Source shows an explicit user-command AI-agent extension installer, which warrants a warning under the install-control-surface policy. It does not show concrete malicious behavior or an unconsented lifecycle hook.
Evidence
package.jsondist/cli.jsdist/commands/install-skill.jsdist/commands/uninstall.jsdist/commands/auth.jsdist/report-api/report-api-client.jsdist/config/auth-store.js.agents/skills/resto-datacli/SKILL.md~/.codex/skills/resto-datacli~/.codebuddy/skills/resto-datacli~/.workbuddy/skills/resto-datacli~/.resto-datacli/auth.json
Network endpoints2
cli.test.restosuite.ai127.0.0.1:18081

Decision evidence

public snapshot
AI called this Suspicious at 88.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
  • `dist/commands/install-skill.js` explicitly runs `npx skills add` and copies a bundled skill into Codex, CodeBuddy, and WorkBuddy skill directories.
  • `.agents/skills/resto-datacli/SKILL.md` directs agents to run npm version checks, global npm installation, and local knowledge synchronization.
  • `dist/commands/uninstall.js` removes skill directories for multiple AI-assistant control surfaces when explicitly invoked.
Evidence against
  • `package.json` has only a `prepare` build script; it has no preinstall, install, or postinstall hook.
  • The CLI runs only when invoked as the `resto` binary; no import-time network or filesystem mutation was found.
  • Network requests implement declared authentication, report, and knowledge commands; no credential harvesting or unrelated exfiltration path was found.
  • `dist/config/auth-store.js` stores the CLI auth profile locally with owner read/write permissions.
  • No eval/vm/dynamic-code execution, hidden payload loading, destructive broad filesystem behavior, or stealth persistence was found.
Behavioral surface
Source
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
Supply chain
HighEntropyStringsUrlStrings
Manifest
NoLicense
scanned 30 file(s), 196 KB of source, external domains: 127.0.0.1, cli.test.restosuite.ai

Source & flagged code

3 flagged · loading source
dist/commands/install-skill.jsView file
•Published source reference
Medium
Ai Review Evidence

`dist/commands/install-skill.js` explicitly runs `npx skills add` and copies a bundled skill into Codex, CodeBuddy, and WorkBuddy skill directories.

dist/commands/install-skill.jsView on unpkg
agents/skills/resto-datacli/SKILL.mdView file
•Published source reference
Medium
Ai Review Evidence

`.agents/skills/resto-datacli/SKILL.md` directs agents to run npm version checks, global npm installation, and local knowledge synchronization.

agents/skills/resto-datacli/SKILL.mdView on unpkg
dist/commands/uninstall.jsView file
•Published source reference
Medium
Ai Review Evidence

`dist/commands/uninstall.js` removes skill directories for multiple AI-assistant control surfaces when explicitly invoked.

dist/commands/uninstall.jsView on unpkg

Findings

5 Medium6 Low
MediumNetwork
MediumEnvironment Vars
MediumAi Review Evidencedist/commands/install-skill.js
MediumAi Review Evidenceagents/skills/resto-datacli/SKILL.md
MediumAi Review Evidencedist/commands/uninstall.js
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License