registry / openwiki / 0.1.1

openwiki@0.1.1

A CLI that uses a DeepAgents documentation agent to generate and maintain an OpenWiki for a codebase.

AI Security Review

scanned 15h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

No blocking static signals were detected.

Trigger

User runs openwiki code (for example, code --init or code --update).

Impact

Can alter repository guidance for coding agents and add recurring CI automation.

Mechanism

explicit agent-config and CI workflow setup

Rationale

No concrete malicious chain, hidden payload, lifecycle execution, or unsolicited credential exfiltration was found. Flag as a warning because explicit execution can establish recurring CI and AI-agent configuration in a user repository.

Evidence

package.jsondist/cli.jsdist/code-mode.jsdist/agent/docs-only-backend.jsdist/env.jsAGENTS.mdCLAUDE.md.github/workflows/openwiki-update.yml

Decision evidence

public snapshot

AI called this Suspicious at 90.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

openwiki@0.1.1

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code