registry / aicall-cli-x / 0.0.19

aicall-cli-x@0.0.19

AI 外呼 CLI

AI Security Review

scanned 3d ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. No install-time execution is present. When a user runs the CLI update command, it can globally install multiple latest-tag skill packages; login submits credentials to a fixed HTTP endpoint.

Static reason

One or more suspicious static signals were detected.

Trigger

User invokes `aicall`, especially `aicall update` or login/init commands.

Impact

Unpinned global skill installation expands supply-chain and agent-capability risk; HTTP credential submission risks exposure.

Mechanism

Obfuscated CLI performs network requests, credential submission, and explicit global dependency installation.

Rationale

The package has no lifecycle hook and its actions require explicit CLI use, so the evidence does not establish malicious install-time behavior. Its obfuscation, plaintext credential transport, and global latest-tag skill installation warrant a warning.

Evidence

package.jsonbin/aicall.jsdist/bundle.cjs~/.aicallrc/config.json

Network endpoints2

39.96.50.154:8088cfs-ms.pa18.com

Decision evidence

public snapshot

AI called this Suspicious at 93.0% confidence with false-positive risk.

aicall-cli-x@0.0.19

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code