registry / recess-cli / 1.6.0

recess-cli@1.6.0

Safe Recess administration and family AI tools from the command line.

AI Security Review

scanned 22d ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. Postinstall automatically installs this package's bundled Recess skill into Codex and Claude skill directories. No credential harvesting, remote payload execution, or broad agent-config mutation was confirmed.

Static reason

One or more suspicious static signals were detected.

Trigger

npm postinstall for a published tarball lacking src/

Impact

An installed agent will discover and follow the Recess CLI skill without an explicit setup command.

Mechanism

copies package-owned skill files into named agent skill directories

Rationale

This is a real unattended agent-extension lifecycle side effect, so it warrants a warning. Its scope is package-owned skills and the source includes containment/type checks for later explicit server updates; no malicious chain was confirmed.

Evidence

package.jsonscripts/postinstall.mjsdist/setup.jsdist/skill-update.jsdist/config.jsskill/recess-cli~/.codex/skills/recess-cli~/.claude/skills/recess-cli~/.codex/skills/recess-admin~/.claude/skills/recess-admin

Decision evidence

public snapshot

with false-positive risk.

recess-cli@1.6.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code