registry / recess-cli / 1.9.0

recess-cli@1.9.0

Safe Recess administration and family AI tools from the command line.

AI Security Review

scanned 14d ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. npm postinstall automatically refreshes this package's named agent skill for Codex and Claude. It replaces only `recess-cli` and legacy `recess-admin` skill directories using bundled package content; no install-time network activity is present.

Static reason

One or more suspicious static signals were detected.

Trigger

npm install or upgrade

Impact

Automatic mutation of named agent extension directories.

Mechanism

postinstall copies package-owned agent skills

Rationale

This is a guarded first-party agent-extension lifecycle behavior rather than a concrete malicious chain. It warrants a warning because npm postinstall mutates AI-agent skill directories without an explicit setup command.

Evidence

package.jsonscripts/postinstall.mjsdist/setup.jsdist/skill-update.jsskill/recess-cli$CODEX_HOME/skills/recess-cli$CLAUDE_CONFIG_DIR/skills/recess-cli$CODEX_HOME/skills/recess-admin$CLAUDE_CONFIG_DIR/skills/recess-admin

Decision evidence

public snapshot

AI called this Suspicious at 89.0% confidence as Dangerous Capability with false-positive risk.

recess-cli@1.9.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code