registry / snowflake-axi / 0.1.1

snowflake-axi@0.1.1

Snowflake explorer for agents; TOON output, reads free, writes by consent

AI Security Review

scanned 13h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

No blocking static signals were detected.

Trigger

User runs `snowflake-axi hooks install`.

Impact

Future Claude Code, Codex, and OpenCode sessions can execute the package context binary.

Mechanism

Opt-in agent hook/configuration mutation.

Rationale

No concrete malicious chain was found, but the package provides explicit persistent AI-agent hook installation. Per policy, this warrants a warning rather than a block.

Evidence

package.jsondist/commands/hooks.jsdist/hooks.jsdist/bin/snowflake-axi-context.jsdist/snowflake.js~/.claude/settings.json~/.codex/hooks.json~/.codex/config.toml~/.config/opencode/plugins/axi-snowflake-axi.js

Network endpoints1

localhost:8976/callback

Decision evidence

public snapshot

snowflake-axi@0.1.1

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code