registry / @topolo/cli / 0.12.20

@topolo/cli@0.12.20

Public command-line interface for Topolo customer organizations, developers, and agents.

AI Security Review

scanned 5d ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

Running topolo setup or topolo skills install, potentially following the postinstall instructions.

Impact

Changes persistent agent instructions and available tools; the explicit-command gate supports a warning rather than a confirmed malicious install attack.

Mechanism

Copies bundled skill content and writes local MCP command registrations into native agent configuration files.

AI rationale

The explicit agent configuration capability warrants a warning under the supplied policy, reinforced by install-time instructions aimed at automating assistant actions. Inspected source does not establish direct unconsented lifecycle mutation or credential exfiltration sufficient for blocking.

Evidence

package.jsonpostinstall.mjsdist/index.js.codex/config.toml

Decision evidence

public snapshot

AI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

@topolo/cli@0.12.20

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code