registry / aedibase-install / 0.2.0

aedibase-install@0.2.0

One command to connect AI coding agents (Claude Code, Cursor, Windsurf, Copilot, Codex, …) to your aedibase backend via MCP. Zero-install: npx aedibase-install --client claude-code --env AEDIBASE_TOKEN=aedu_...

AI Security Review

scanned 16h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

No blocking static signals were detected.

Trigger

User runs `npx aedibase-install` and selects or passes `--client`.

Impact

Selected agent will later launch aedibase-mcp with the supplied token.

Mechanism

Explicit AI-agent MCP configuration mutation

Rationale

Source inspection shows an explicit, package-aligned agent-extension installer rather than unconsented install-time control-surface mutation. It warrants a warning for capability and secret-bearing configuration changes, not a block.

Evidence

package.jsonbin/aedibase-install.mjsREADME.md

Network endpoints1

app.aedify.ai

Decision evidence

public snapshot

AI called this Suspicious at 93.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

Explicit CLI writes MCP configuration for 12 AI coding clients.

aedibase-install@0.2.0

AI Security Review

Decision evidence

Source & flagged code

Findings