registry / @tokz/cli / 0.2.7

@tokz/cli@0.2.7

Audit where your coding agent's context window and API dollars go.

AI Security Review

scanned 1h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs `tokz statusline enable`.

Impact

Claude Code subsequently invokes `@tokz/cli statusline`; no source evidence shows exfiltration or destructive behavior.

Mechanism

Writes a first-party `npx` statusline command into Claude Code settings.

Rationale

The package is not malicious by source inspection, but its explicit statusline command persists a package-owned AI-agent hook. Per the firewall policy, this first-party explicit agent configuration mutation warrants a warning rather than a block.

Evidence

package.jsondist/cli.jsdist/statusline-5SJKELOG.jsdist/chunk-65BQE6TI.jsdist/Root-ZPDATMNQ.jsREADME.md~/.claude/settings.json~/.tokz/litellm-prices.json~/.claude/projects~/.claude.json<project>/.mcp.json

Network endpoints1

raw.githubusercontent.com/BerriAI/litellm/main/model_prices_and_context_window.json

@tokz/cli@0.2.7

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code