registry / agentix-cli / 0.136.1
agentix-cli@0.136.1
AI operations layer for small and medium businesses. Routes Telegram, WhatsApp, GitLab, GitHub, crons, webhooks, and mesh tasks to AI agents. Web wizard for operators, CLI for engineers. Self-hosted.
AI Security Review
scanned 13d ago · by lpm-firewall-aiThe inspected source does not substantiate the scanner’s exfiltration claim: the OAuth credentials are used for requests to Anthropic’s API, and the postinstall hook is a native dependency rebuild. Agent file behavior appears tied to setup or workspace features, with no confirmed install-time agent configuration mutation or attack chain.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
Package installation runs the postinstall hook; workspace and agent configuration behavior is reached through package features.
Impact
No confirmed malicious effect or unrelated credential disclosure was established.
Mechanism
The postinstall hook rebuilds a native dependency. Inspected agent helpers read or update workspace instructions and memory; no evidence showed an unconsented npm hook changing a foreign agent configuration.
AI rationale
The inspected source does not substantiate the scanner’s exfiltration claim: the OAuth credentials are used for requests to Anthropic’s API, and the postinstall hook is a native dependency rebuild. Agent file behavior appears tied to setup or workspace features, with no confirmed install-time agent configuration mutation or attack chain.
Evidence
package.jsonscripts/postinstall.mjs
Network endpoints1
api.anthropic.com/v1/messages
Decision evidence
public snapshotAI called this Clean at 78.0% confidence as Benign with medium false-positive risk.
Evidence for AI clean decision
- package.json defines the CLI entry point and a postinstall hook; the inspected hook rebuilds better-sqlite3.
- The inspected files read or update agent workspace instructions and memory, or configure provider credentials as part of setup.
- The OAuth helper reads Claude credentials, and the provider code sends them to Anthropic’s API; inspected code did not show forwarding to an unrelated recipient.
- The flagged bundle paths were inspected at their required locations; their excerpts show imports or benign context and setup helpers, not an attack.
Evidence against
Behavioral surface
ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
19 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/postinstall.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.mjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/chunk-XXIZGNLT.jsView file
50L51: ${E}${N}`}]}}case"agentx_wiki_patch":{let n=String(e.agent||"").trim(),s=String(e.title_or_path||"").trim(),i=String(e.instruction||"").trim();if(!n||!s||!i)return{content:[{type:"...
L52: ${[d.stdout,d.stderr,d.message].filter(Boolean).map(g=>$t(String(g))).join(`
L53: `).trim().slice(0,2e3)}`}]}}}case"agentx_wiki_interview":{let n=String(e.agent||"").trim(),s=String(e.topic||"").trim(),i=String(e.type||"").trim().toLowerCase(),o=Array.isArray(e....
...
L60: `);if(i===-1)break;let a=t.slice(0,i).match(/Content-Length:\s*(\d+)/);if(!a){t=t.slice(i+4);continue}let c=parseInt(a[1],10),l=i+4,d=l+c;if(t.length<d)break;let u=t.slice(l,d);t=t...
L61: `);if(i===-1)break;let o=t.slice(0,i).trim();t=t.slice(i+1),o&&th(o,e)}}),process.stdin.on("end",()=>{e("stdin closed, shutting down."),
Findings
5 Critical10 High7 Medium6 Low
CriticalSame File Env Network Executiondist/program-IUUHETTV.js
CriticalHardcoded Runtime Data Exfiltrationdist/chunk-2PJKGZWP.js
CriticalCommand Output Exfiltrationdist/chunk-XXIZGNLT.js
CriticalTrigger Reachable Dangerous Capabilitydist/chunk-XXIZGNLT.js
CriticalPrevious Version Dangerous Deltadist/chunk-XXIZGNLT.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/chunk-XXIZGNLT.js
HighShell
HighCredential Redirect Persistencedist/program-IUUHETTV.js
HighCopied Package Dependency Bridgedist/board-dashboard-OSI4X5ZJ.js
HighExternal Ai Agent Control Surface Mutationdist/program-IUUHETTV.js
Affected versions and remediation
This report applies to agentix-cli@0.136.1.
See all versions of agentix-cli for other recorded verdicts.
- Review the evidence and your use of agentix-cli@0.136.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.