registry / recess-cli / 1.9.2
recess-cli@1.9.2
Safe Recess administration and family AI tools from the command line.
AI Security Review
scanned 14d ago · by lpm-firewall-aiThe active postinstall hook automatically replaces package-owned agent skill directories, creating a lifecycle extension risk. The targets are limited to named Recess skills, so the source supports a warning rather than a confirmed attack or block.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Installing the published package runs its postinstall hook.
Impact
Existing contents in those named skill directories can be replaced during installation; no effect on unrelated agent settings was established.
Mechanism
The hook imports installSkill, which removes and recopies the recess-cli skill directory for Codex and Claude, and removes the named superseded recess-admin directory.
AI rationale
The active postinstall hook automatically replaces package-owned agent skill directories, creating a lifecycle extension risk. The targets are limited to named Recess skills, so the source supports a warning rather than a confirmed attack or block.
Evidence
package.jsonscripts/postinstall.mjsdist/setup.jsskill/recess-cli
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package runs a postinstall hook.
- The hook imports and calls installSkill on published installs.
- installSkill replaces named Codex and Claude skill directories with the package-bundled skill.
Evidence against
- The setup targets the package's own recess-cli skill directories and removes only the named superseded recess-admin directory.
- The bundled skill describes Recess CLI usage and approval steps; inspected content shows no credential collection or unrelated agent configuration changes.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
4 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/postinstall.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.mjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgscripts/postinstall.mjsView file
30L31: const { installSkill } = await import(setupModule);
L32: const destinations = await installSkill();
Medium
Dynamic Require
Package source references dynamic require/import behavior.
scripts/postinstall.mjsView on unpkg · L30Findings
2 High5 Medium5 Low
HighInstall Time Lifecycle Scriptspackage.json
HighPrevious Version Dangerous Deltadist/auth.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumDynamic Requirescripts/postinstall.mjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to recess-cli@1.9.2.
See all versions of recess-cli for other recorded verdicts.
- Review the evidence and your use of recess-cli@1.9.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.