recess-cli@2.6.1

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

npm postinstall, or the user's `recess setup` command.

The package can influence agent behavior through its installed skill, but the inspected code confines writes to its own named skill directories and remote updates to Markdown files.

Agent-skill installation and explicit remote Markdown skill update.

The automatic installation of a first-party agent skill is a meaningful lifecycle risk, but source inspection found no self-dependency, secret harvesting, arbitrary command execution, or unbounded agent-config write. Remote updates require an explicit command and enforce contained Markdown-only paths.