registry / @vwork/cli / 0.1.19

@vwork/cli@0.1.19

Broken package metadata; use 0.1.20 or later.

AI Security Review

scanned 8h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User invokes `vwork codegen skill install-curl` and separately executes its output.

Impact

May add or replace `vwork-backend-service/SKILL.md` under a user agent-skill directory from the VWork host.

Mechanism

Explicit agent-skill installer command generation

Rationale

Source inspection found no concrete malicious chain, lifecycle execution, credential exfiltration, or remote payload execution. Per policy, the explicit agent-extension setup capability warrants a warning despite being user-invoked and not self-executing.

Evidence

package.jsondist/index.jsdist/codegen.jsdist/update.jsdist/update-registry.jsdist/auth/store.jsdist/update-policy.js

Network endpoints2

vwork.vvicat.dev/skill.mdregistry.npmjs.org/@vwork%2Fcli

@vwork/cli@0.1.19

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code