registry / wbso-cli / 0.1.0

wbso-cli@0.1.0

CLI (invoked as `wbso`) for Dutch WBSO / S&O hours administration (urenadministratie).

AI Security Review

scanned 13h ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. Explicit `wbso init` persists a package-owned agent skill and WBSO API configuration. No install-time execution or confirmed malicious behavior was found.

Static reason

No blocking static signals were detected.

Trigger

User runs `wbso init --key ... --url ...`.

Impact

A user-invoked setup can influence Claude/Codex behavior through its installed WBSO skill and access the configured binder service.

Mechanism

Copies a package-provided agent skill and stores configured API credentials.

Rationale

Source inspection confirms a user-invoked first-party agent extension installer, which warrants a warning under the policy. No lifecycle execution, stealth, exfiltration, destructive behavior, or remote code execution was found.

Evidence

package.jsondist/wbso.mjsskill/SKILL.mdREADME.md~/.wbso/config.json~/.claude/skills/wbso/SKILL.md~/.codex/skills/wbso/SKILL.md

Network endpoints1

localhost:3006/api/agent

Decision evidence

public snapshot

AI called this Suspicious at 92.0% confidence with false-positive risk.

wbso-cli@0.1.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code