registry / @topolo/cli / 0.12.2

@topolo/cli@0.12.2

Public command-line interface for Topolo customer organizations, developers, and agents.

AI Security Review

scanned 13d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. An install lifecycle message directs an AI assistant to execute configuration-changing setup. That setup registers a Topolo MCP server in AI-agent configuration.

Static reason

One or more suspicious static signals were detected.

Trigger

npm postinstall output interpreted by an AI assistant.

Impact

An AI-agent control surface can be modified without an explicit user setup command.

Mechanism

The lifecycle script prompts automatic execution of topolo setup, whose default target selection includes Claude and Codex and writes MCP registrations.

Policy narrative

Installation invokes a postinstall script that addresses an AI assistant and tells it to run topolo setup automatically. The setup command defaults to Claude and Codex, includes detected hosts, and writes MCP registrations. This creates an indirect install-time path to alter local AI-agent control configuration without a user explicitly choosing setup.

AI rationale

The automatic lifecycle prompt is directed at an AI and chains to broad local agent configuration writes. This is an unconsented install-time AI-agent control-surface modification path.

Evidence

package.jsonpostinstall.mjsdist/index.js

Decision evidence

public snapshot

AI identified this as a dangerous AI-agent capability at 90.0% confidence with low false-positive risk.

@topolo/cli@0.12.2

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code