Loading npm security reports…

x-agent-relay-cli@0.1.16: AI-agent control-surface risk | LPM Firewall

registry / x-agent-relay-cli / 0.1.16

x-agent-relay-cli@0.1.16

Delegate subtasks from your coding agent to other agents on the Agent Relay network

AI Security Review

scanned 3d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Installation automatically modifies multiple foreign AI agents' global skill surfaces without consent. Existing delegate skills can be overwritten.

Static reason

One or more suspicious static signals were detected.

Trigger

npm postinstall when supported agent directories exist.

Impact

Persistent changes to agent instructions and possible replacement of existing delegation behavior; no credential theft is established.

Mechanism

The lifecycle hook runs skills install --all, bypassing the picker and copying the packaged skill into every detected agent's skill directory.

Policy narrative

Installing the package triggers a bundled installer with --all. It detects foreign coding agents and copies delegation instructions into their global skill directories, creating directories and overwriting existing skill files without asking. The interactive picker exists but is bypassed by the lifecycle caller. This establishes unconsented installation-time mutation of a broad AI-agent control surface.

AI rationale

The inspected lifecycle chain performs unconsented writes to foreign agents' global instructions. This meets the explicit blocking rule for installation-time AI-agent control-surface mutation, regardless of the skill's package-aligned purpose.

Evidence

package.jsonscripts/postinstall.mjsdist-bin/x-agent-relay.mjsskills/delegate/SKILL.md~/.claude/skills/delegate/SKILL.md~/.codex/skills/delegate/SKILL.md~/.agents/skills/delegate/SKILL.md

Source & flagged code

5 flagged

package.jsonView file

Lines 4-43json

4 "description": "Delegate subtasks from your coding agent to other agents on the Agent Relay network",

5 "keywords": ["agent", "ai", "delegation", "mcp", "claude", "opencode", "codex", "trae", "cli"],

6 "license": "MIT",

7 "repository": {

8 "type": "git",

9 "url": "git+https://github.com/wisimer/XAgentRelay.git",

10 "directory": "apps/cli"

11 },

12 "homepage": "https://github.com/wisimer/XAgentRelay#readme",

13 "bugs": "https://github.com/wisimer/XAgentRelay/issues",

14 "type": "module",

15 "bin": {

16 "x-agent-relay": "./dist-bin/x-agent-relay.mjs"

17 },

18 "files": [

19 "dist-bin",

20 "skills",

21 "scripts"

22 ],

23 "scripts": {

24 "postinstall": "node scripts/postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L24

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L24

25 "bundle": "esbuild dist/index.js --bundle --platform=node --format=esm --target=node18 --outfile=dist-bin/x-agent-relay.mjs --banner:js=\"import { createRequire as __arCreateRequire } from 'node:module'; const require = __arCreateRequire(import.meta.url);\" --external:bufferutil --external:utf-8-validate && chmod +x dist-bin/x-agent-relay.mjs"

26 },

27 "publishConfig": {

28 "registry": "https://registry.npmjs.org",

29 "access": "public"

30 },

31 "devDependencies": {

32 "@x-agent-relay/agent-runtime": "*",

33 "@x-agent-relay/protocol": "*",

34 "@x-agent-relay/sdk": "*",

35 "@x-agent-relay/shared": "*",

36 "commander": "^13.0.0",

37 "esbuild": "^0.28.2"

38 },

39 "engines": {

40 "node": ">=18"

41 }

42}

43

scripts/postinstall.mjsView file

Lines 1-23javascript

1// npm postinstall: install the /delegate skill for every detected coding

2// agent (Claude Code, Codex, Trae, Qwen, shared ~/.agents, …) by invoking the

3// bundled CLI. Best-effort only — must never fail the install.

4import { spawnSync } from "node:child_process";

5import { existsSync } from "node:fs";

High

Child Process

Package source references child process execution.

scripts/postinstall.mjsView on unpkg · L3

dist-bin/x-agent-relay.mjsView file

Lines 7209-7249javascript

7209 if (ctx?.previous_attempts?.length) {

7210 lines.push("");

7211 lines.push("## Previous attempts");

7212 for (const a of