registry / xiaokcode / 1.4.22

xiaokcode@1.4.22

本地优先的 AI 任务交付工作台 CLI

AI Security Review

scanned 19h ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. The explicit plugin installer persists remote extensions under `~/.xiaok/plugins`. Subsequent CLI runtime loads those extensions and can execute their declared hooks or servers.

Static reason

No blocking static signals were detected.

Trigger

User runs `xiaok plugin install <name>` and later starts the CLI.

Impact

A selected remote plugin can persist and execute code in the user's AI-agent CLI environment.

Mechanism

Remote plugin installation with registry-supplied command execution and auto-loaded extension hooks.

Rationale

Source confirms an explicit, package-owned remote extension installation and auto-load lifecycle with command execution. There is no npm lifecycle trigger or evidence that this package itself exfiltrates data or installs extensions without user action.

Evidence

package.jsondist/commands/plugin.jsdist/platform/plugins/runtime.jsdist/platform/plugins/loader.jsdist/platform/plugins/manifest.jsdist/runtime/hooks-runner.js~/.xiaok/plugins/<name>~/.xiaok/plugins/.tmp-<name>-<timestamp>

Network endpoints2

raw.githubusercontent.com/kaisersong/kai-xiaok-plugins/main/registry.json/repos/kaisersong/kai-xiaok-plugins/contents/registry.json

xiaokcode@1.4.22

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code