registry / @scrapes/installer / 1.2.0

@scrapes/installer@1.2.0

One guided CLI to install, update, and manage Agentic OS + Skill Systems.

AI Security Review

scanned 15h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs `scrapes-setup`, selects VPS setup/update, and supplies server access and tokens.

Impact

The selected VPS receives privileged setup, persistent service configuration, Claude credentials/configuration, and Telegram bot control.

Mechanism

Interactive remote provisioning and AI-agent Telegram channel configuration.

Rationale

This is an explicit-user-command AI-agent control-surface mutation rather than install-time malware. It warrants a warning for its privileged remote provisioning and persistence capability.

Evidence

package.jsonbin/cli.jssrc/flow.jssrc/token.jsscripts/go-remote.shscripts/go-remote-update.shscripts/telegram-supervisor.sh/home/agentic/.claude/.credentials.json/home/agentic/.claude/settings.json/home/agentic/.claude/telegram-supervisor.sh/etc/systemd/system/agentic-telegram.service/home/agentic/agentic-os/.env

Network endpoints5

@scrapes/installer@1.2.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code