registry / recess-cli / 1.8.0

recess-cli@1.8.0

Safe Recess administration and family AI tools from the command line.

AI Security Review

scanned 18d ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. On npm installation, the package automatically replaces its own skill under Codex and Claude skill roots and removes the legacy recess-admin skill. No remote fetch occurs in the postinstall path.

Static reason

One or more suspicious static signals were detected.

Trigger

npm postinstall

Impact

Unattended mutation of package-owned agent extension directories.

Mechanism

first-party agent-skill lifecycle installation

Rationale

The automatic postinstall mutation of AI-agent skill directories warrants a warning under the lifecycle policy, but the inspected code is bounded to the package's own skill and shows no concrete malware behavior.

Evidence

package.jsonscripts/postinstall.mjsdist/setup.jsskill/recess-cli~/.codex/skills/recess-cli~/.claude/skills/recess-cli~/.codex/skills/recess-admin~/.claude/skills/recess-admin

Decision evidence

public snapshot

AI called this Suspicious at 91.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

recess-cli@1.8.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code