registry / @superblocksteam/cli / 2.0.169
@superblocksteam/cli@2.0.169
Official Superblocks CLI
AI Security Review
scanned 25d ago · by lpm-firewall-aiThe inspected source supports a warning for first-party agent setup capability, while the configuration and skill changes require the user-invoked setup command. The preinstall script is an upgrade-migration hook; the inspected source does not establish malicious behavior.
Static reason
One or more suspicious static signals were detected.
Trigger
A user invokes the MCP setup command and selects a client.
Impact
The selected agent can start the logged-in Superblocks Gateway and load the Superblocks import skill.
Mechanism
The command writes a Superblocks Gateway server entry to supported client configuration and can copy its import skill into that client’s skill directory.
AI rationale
The inspected source supports a warning for first-party agent setup capability, while the configuration and skill changes require the user-invoked setup command. The preinstall script is an upgrade-migration hook; the inspected source does not establish malicious behavior.
Evidence
package.jsondist/index.jsdist/dist-ZSDT4GMP.js~/.claude.json~/.cursor/mcp.json~/.claude/skills/superblocks-import/SKILL.md~/.cursor/skills/superblocks-import/SKILL.md
Decision evidence
public snapshotAI called this Suspicious at 84.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- package.json runs a preinstall script that checks for and uninstalls previous Superblocks CLI versions.
- The MCP setup command targets named agent clients and writes a Gateway configuration for the logged-in CLI user.
- The setup can copy the package-owned Superblocks import skill into a selected client’s skills directory.
- The setup inherits SUPERBLOCKS_AUTH_FILE into the configured MCP server environment when set.
Evidence against
- The configuration and skill writes are performed by the explicit MCP setup command, which prompts for a client in interactive use or requires --client without a TTY.
- The preinstall hook is confined by its stated behavior to finding previous Superblocks CLI installations.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStrings
Source & flagged code
18 flaggedpackage.jsonView file
•scripts.preinstall = node scripts/customer/preinstall.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.preinstall = node scripts/customer/preinstall.js
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/dist-ZSDT4GMP.jsView file
987init_cjs_shims();
L988: import { execFile as execFileCallback } from "node:child_process";
L989: import { access } from "node:fs/promises";
High
Child Process
Package source references child process execution.
dist/dist-ZSDT4GMP.jsView on unpkg · L987Findings
11 High8 Medium6 Low
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/dist-ZSDT4GMP.js
HighShelldist/index.js
HighHost Fingerprint Exfiltrationdist/chunk-S63NQ5KQ.js
HighCredential Redirect Persistencedist/index.js
HighCommand Output Exfiltrationdist/chunk-S63NQ5KQ.js
HighSandbox Evasion Gated Capabilityscripts/verify-ripgrep-package.mjs
HighCross File Remote Execution Contextdist/chunk-S63NQ5KQ.js
HighTrigger Reachable External Post Callbackdist/chunk-S63NQ5KQ.js
HighShips High Entropy Blobdist/superblocks.plugin
HighSemantic Analysis Limiteddist/chunk-S63NQ5KQ.js
Affected versions and remediation
This report applies to @superblocksteam/cli@2.0.169.
See all versions of @superblocksteam/cli for other recorded verdicts.
- Review the evidence and your use of @superblocksteam/cli@2.0.169 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.