agent-security-lens 0.1.5 → 0.1.6

package/.mcp/server.json

@@ -8,12 +8,12 @@
     "url": "https://github.com/professor2k8/agent-security-lens",
     "source": "github"
   },
-  "version": "0.1.5",
+  "version": "0.1.6",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "agent-security-lens",
-      "version": "0.1.5",
+      "version": "0.1.6",
       "transport": {
         "type": "stdio"
       },

package/CHANGELOG.md

@@ -1,5 +1,10 @@
 # Changelog
 
+## 0.1.6
+
+- Route `agent-security-lens review ...` to the quick pre-install decision CLI while preserving MCP stdio mode for normal agent configuration.
+- Prefer the package main command in quick-start docs so agents can call the same package they install as an MCP.
+
 ## 0.1.5
 
 - Add `asl-review` and `agent-security-lens-review` quick decision commands for pre-install checks without configuring an MCP client first.

package/README.md

@@ -11,7 +11,7 @@ ASL is not a malware verdict tool. It returns observable risk signals, required
 Try one pre-install decision first:
 
 ```bash
-npx -y --package agent-security-lens asl-review filesystem \
+npx -y agent-security-lens review filesystem \
   --type mcp \
   --source-url https://github.com/modelcontextprotocol/servers \
   --install-command "npx -y @modelcontextprotocol/server-filesystem ." \
@@ -21,6 +21,8 @@ npx -y --package agent-security-lens asl-review filesystem \
 
 The command returns an agent-readable decision, trust score, risk signals, safe install plan, and whether automatic installation is allowed.
 
+If your shell does not expose npm temporary binaries correctly, use `npm install -g agent-security-lens` once, then run the same command without `npx -y`.
+
 Add ASL as a pre-install trust check MCP:
 
 ```json

package/RELEASE-MANIFEST.json

@@ -1,8 +1,8 @@
 {
   "schema_version": "0.1.0",
   "package": "agent-security-lens",
-  "version": "0.1.5",
-  "generated_at": "2026-06-24T12:03:47.242Z",
+  "version": "0.1.6",
+  "generated_at": "2026-06-24T12:17:11.165Z",
   "source": "ASL verified public release exporter",
   "files": [
     {
@@ -48,7 +48,7 @@
     {
       "path": ".mcp/server.json",
       "bytes": 1316,
-      "sha256": "01b08b038eb21dd2295495b5b6510fa152a7ad5e0cec8ad58a0930b2236bc2a4"
+      "sha256": "ccd53b1ecd798c344991cb136945a256b21e6b9929a594df08be8d4da4f9fcb3"
     },
     {
       "path": ".npmignore",
@@ -57,8 +57,8 @@
     },
     {
       "path": "CHANGELOG.md",
-      "bytes": 2373,
-      "sha256": "94e67cb8c723468ff5fab1a1376d5ba3323fb21343823a06d2dcde0c81c33f10"
+      "bytes": 2641,
+      "sha256": "2ed80a454a044e14aaf185d0b8498bc3d9abaec6ae78159416ceacec9b68227c"
     },
     {
       "path": "CODE_OF_CONDUCT.md",
@@ -87,8 +87,8 @@
     },
     {
       "path": "README.md",
-      "bytes": 7097,
-      "sha256": "521c54734fafe40d25719373fc04dbbe052f2185f381cd85015999940745c3e2"
+      "bytes": 7239,
+      "sha256": "23bfccd78e24d3bcd671d8eb1ea3228d38577145580aa9c8239e26634908bc89"
     },
     {
       "path": "SECURITY.md",
@@ -97,13 +97,13 @@
     },
     {
       "path": "apps/mcp-server/agent-security-lens-mcp.mjs",
-      "bytes": 15239,
-      "sha256": "612a1c12ed4a646d9208e8393ac0964b89b6034f5559d32f23a9217f1ff37376"
+      "bytes": 15475,
+      "sha256": "b52fd8db2d26868d5403664420b631f08e7e1616b787b61644d79b647c1884e7"
     },
     {
       "path": "bin/agent-security-lens-review.mjs",
-      "bytes": 6938,
-      "sha256": "8086a968c00640e0aa08b0bb0107ced6aa3e686846d3d51e2bba52f1b2e4eb9d"
+      "bytes": 7016,
+      "sha256": "a11cfd8a70882c7d4ba4aa3af58f184db1acbfa4aa1a68e08f77ca4c232278f3"
     },
     {
       "path": "bin/agent-security-lens.mjs",
@@ -277,13 +277,13 @@
     },
     {
       "path": "llms.txt",
-      "bytes": 2151,
-      "sha256": "07f20087fb912891247d4e4779925fa15a9e83fea52e0142a74292477f52a183"
+      "bytes": 2137,
+      "sha256": "b54be6efb874b5972956313a3c436edcb1f236de1e700ce7557cee6d940d43f6"
     },
     {
       "path": "package.json",
       "bytes": 2568,
-      "sha256": "e7d3850d61923b3d6e8b29decc3aa1e2c4717a1ad1c7736a4901031c2b8f4dce"
+      "sha256": "a56f3b0f99b1ebb8fc1e36524dc250ba79632c290ad2471adc197c41277f8e44"
     },
     {
       "path": "profiles/generic-agent/profile.json",
@@ -413,7 +413,7 @@
     {
       "path": "server.json",
       "bytes": 1316,
-      "sha256": "01b08b038eb21dd2295495b5b6510fa152a7ad5e0cec8ad58a0930b2236bc2a4"
+      "sha256": "ccd53b1ecd798c344991cb136945a256b21e6b9929a594df08be8d4da4f9fcb3"
     },
     {
       "path": "src/assessment/assess.mjs",

package/apps/mcp-server/agent-security-lens-mcp.mjs

@@ -17,6 +17,11 @@ const serverInfo = {
   version: "0.1.0"
 };
 
+if (process.argv[2] === "review" || process.argv[2] === "quick-review" || process.argv[2] === "--help" || process.argv[2] === "-h") {
+  await import("../../bin/agent-security-lens-review.mjs");
+  process.exit(process.exitCode || 0);
+}
+
 const tools = [
   {
     name: "get_install_policy",

package/bin/agent-security-lens-review.mjs

@@ -42,6 +42,7 @@ function parseArgs(argv) {
   };
 
   const rest = argv.slice(2);
+  if (rest[0] === "review" || rest[0] === "quick-review") rest.shift();
   if (!rest.length || rest.includes("--help") || rest.includes("-h")) return { help: true };
 
   args.component_name = rest[0];
@@ -187,7 +188,7 @@ async function main() {
   }
 }
 
-main().catch((error) => {
+await main().catch((error) => {
   console.error(error?.stack || String(error));
   process.exitCode = 1;
 });

package/llms.txt

@@ -6,7 +6,7 @@ Primary use:
 Before installing or enabling any MCP, Skill, tool, prompt bundle or workflow, call the AgentSecurityLens MCP tool `review_before_install`.
 
 Quick pre-install review command:
-`npx -y --package agent-security-lens asl-review <component-name> --type mcp --source-url <url> --install-command <command>`
+`npx -y agent-security-lens review <component-name> --type mcp --source-url <url> --install-command <command>`
 
 Public intelligence files:
 - docs/agent-install.md

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-security-lens",
-  "version": "0.1.5",
+  "version": "0.1.6",
   "private": false,
   "mcpName": "io.github.professor2k8/agent-security-lens",
   "description": "Safe-install and trust-check MCP for autonomous agents before they install MCPs, Skills or tools.",

package/server.json

@@ -8,12 +8,12 @@
     "url": "https://github.com/professor2k8/agent-security-lens",
     "source": "github"
   },
-  "version": "0.1.5",
+  "version": "0.1.6",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "agent-security-lens",
-      "version": "0.1.5",
+      "version": "0.1.6",
       "transport": {
         "type": "stdio"
       },