registry / recess-cli / 1.7.0

recess-cli@1.7.0

Safe Recess administration and family AI tools from the command line.

AI Security Review

scanned 22d ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. npm postinstall refreshes this package's bundled Recess skill into Codex and Claude skill directories. No confirmed credential theft, remote code execution, or broad control-surface mutation was found.

Static reason

One or more suspicious static signals were detected.

Trigger

npm installation of the published package; served-skill update requires explicit recess setup.

Impact

An unattended install overwrites the package-owned recess-cli skill and removes its superseded recess-admin skill directory.

Mechanism

first-party agent-skill copy with constrained Markdown bundle updates

Rationale

The package has a real install-time agent-skill overwrite surface, so it merits a warning under the lifecycle policy. Source inspection found no concrete malicious chain or exfiltration behavior.

Evidence

package.jsonscripts/postinstall.mjsdist/setup.jsdist/skill-update.jsskill/recess-cli/SKILL.mdskill/recess-cli~/.codex/skills/recess-cli~/.claude/skills/recess-cli

Network endpoints2

api.recess.ggrecess.gg

recess-cli@1.7.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code