registry / tako.sh / 0.0.0-11c642f

tako.sh@0.0.0-11c642f

Official SDK for the Tako application platform

AI Security Review

scanned 2h ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. No install-time attack surface is established. The shipped Tako skill directs an agent, when invoked for a project, to persist Tako runtime instructions in that project's `AGENTS.md`.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

An AI agent uses the bundled `tako` skill in a target project.

Impact

Persistent project-level instructions can influence later agent behavior; no automatic execution or data exfiltration was found.

Mechanism

Explicit agent-guidance mutation of project `AGENTS.md`.

Rationale

No concrete malicious chain was found, but the package explicitly promotes persistent project agent-instruction mutation through its shipped skill. This meets the warning boundary for first-party package-owned agent extension setup.

Evidence

package.jsonskills/tako/SKILL.mddist/src-4fLhca0Y.mjsdist/nextjs.mjsdist/engine-BjI50-XZ.mjsAGENTS.md

Decision evidence

public snapshot

AI called this Suspicious at 90.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

tako.sh@0.0.0-11c642f

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code