registry / AI-agent control-surface risk / @telora/telora-ai

@telora/telora-ai

AI work tracking CLI for Telora — registers trackers, logs interactions, syncs work summaries

This report shows the evidence for @telora/telora-ai@0.4.0. 1 of 2 known versions is blocked or flagged. The newest version, 0.5.0, is flagged. See all versions.

AI Security Review

scanned 13d ago · by lpm-firewall-ai

The verified postinstall behavior makes an unconsented change to Claude Code’s command-hook configuration, which qualifies as AI-agent control-surface hijacking under the review policy. The hook commands are package-owned tracking functions, but their intended purpose does not provide a consent guard for the install-time mutation.

Static reason

One or more suspicious static signals were detected.

Trigger

Installing the package, which runs its postinstall script.

Impact

The package gains automatic execution during Claude Code events for that user.

Mechanism

The setup command adds command hooks to the user’s Claude Code settings and writes the settings file without checking for consent.

Policy narrative

The postinstall script launches the setup command, which adds this package’s hook binaries to Claude Code’s PostToolUse and UserPromptSubmit events and writes the settings file. This is an automatic mutation of an AI-agent control surface without a consent guard.

AI rationale

Evidence

package.jsonbin/telora-ai~/.claude/settings.json

Decision evidence

public snapshot

AI identified this as a dangerous AI-agent capability at 95.0% confidence with low false-positive risk.

Evidence for policy risk

The postinstall lifecycle automatically runs `telora-ai setup-hooks`.
That command targets the user’s Claude Code settings and installs command hooks for tool use and prompt submission.
When settings change, the command writes the modified hooks configuration without a consent check.

Evidence against

The hooks invoke this package’s tracking commands and are added to existing Claude Code hook settings.

Behavioral surface

SourceNo risky source behavior triggered.

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 0 file(s), 0 B of source

Source & flagged code

8 flagged

package.jsonView file

Lines 1-31json

2 "name": "@telora/telora-ai",

3 "version": "0.4.0",

4 "description": "AI work tracking CLI for Telora — registers trackers, logs interactions, syncs work summaries",

5 "bin": {

6 "telora-ai": "bin/telora-ai",

7 "telora-ai-hook": "bin/telora-ai-hook",

8 "telora-ai-human-hook": "bin/telora-ai-human-hook"

9 },

10 "scripts": {

11 "postinstall": "telora-ai setup-hooks || true"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L11

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L11

12 },

13 "files": [

14 "bin",

15 "README.md"

16 ],

17 "publishConfig": {

18 "access": "public",

19 "registry": "https://git.syntelyos.com:3100/api/packages/syntelyos/npm/"

High

Suspicious Lifecycle Evidence

The postinstall lifecycle automatically runs `telora-ai setup-hooks`.

package.jsonView on unpkg · L11

20 },

21 "engines": {

22 "node": ">=18.0.0"

23 },

24 "license": "MIT",

25 "repository": {

26 "type": "git",

27 "url": "ssh://git@git.syntelyos.com:3122/syntelyos/telora.git",

28 "directory": "mcp/telora-ai"

29 }

30}

bin/telora-aiView file

Lines 1156-1251text

1156 return

1157

1158 if not value:

1159 # Get single value

1160 current = get_config(conn, key)

1161 if current:

1162 print(current)

1163 else:

1164 print(f"{Colors.YELLOW}Not set{Colors.NC}")

1165 return

1166

1167 # Set value

1168 set_config(conn, key, value)

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.postinstall = telora-ai setup-hooks || true

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

11"postinstall": "telora-ai setup-hooks || true" }, "files": [ "bin", "README.md" ], "publishConfig": { "access": "public", "registry": "https://git.syntelyos

High

Suspicious Lifecycle Evidence

The postinstall lifecycle automatically runs `telora-ai setup-hooks`.

package.jsonView on unpkg · L11

•scripts.postinstall = telora-ai setup-hooks || true

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/telora-aiView file

Findings

7 High1 Medium1 Low

HighInstall Time Lifecycle Scriptspackage.json

HighSemantic Analysis Limitedbin/telora-ai

HighSuspicious Lifecycle Evidencepackage.json

HighAi Review Evidencebin/telora-ai

MediumAmbiguous Install Lifecycle Scriptpackage.json

LowScripts Present

Affected versions and remediation

This report applies to @telora/telora-ai@0.4.0.

The versions list below shows the verdict for each recorded version.

Avoid installing @telora/telora-ai@0.4.0. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-10-10 02:36:12.854Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

2 known versions

0.5.0latestSuspiciousAgent extension lifecycle riskWarnPublishedOct 14, 2026, 5:23 PM 0.4.0shownMaliciousSoft block: AI-agent control surfaceBlockPublishedSep 28, 2026, 10:28 PM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

More from @telora

Other AI-agent control-surface risk packages

Behavioral surface

Related packages

More from @telora

Other AI-agent control-surface risk packages

Source & flagged code