
Security News
Insecure Agents Podcast: How to Keep AI Agents From Bypassing Security Controls
Socket CTO Ahmad Nassri discusses how to keep AI agents from bypassing package blocks, limit credential access, and monitor their actions.
@sylphx/cli
Advanced tools
Sylphx Platform CLI — npm install channel for the Rust `sylphx` binary (same SSOT as crates.io sylphx-cli).
@sylphx/clinpm install channel for the Rust operator CLI (sylphx).
This package does not reimplement the CLI in TypeScript. It installs and
executes the same native binary published as sylphx-cli on crates.io
(ADR-3820 sole-wire dual-language product path).
| Channel | Command | Product |
|---|---|---|
| npm | npm install -g @sylphx/cli | Rust sylphx binary |
| crates.io | cargo install sylphx-cli | same Rust sylphx binary |
npm install -g @sylphx/cli
# equivalent:
cargo install sylphx-cli
Ships a vendored native binary under binaries/<os>-<arch>/ for supported hosts (linux-x64 first). Optional platform packages (@sylphx/cli-linux-x64,
@sylphx/cli-darwin-arm64, …). If the optional native package is missing for
your OS/arch, install falls back messaging to cargo install sylphx-cli.
Override path (advanced):
export SYLPHX_CLI_BINARY=/path/to/sylphx
Full agent-operable surface (no Console). See sylphx version-info --json
for the authoritative shippedCommands list including:
deploy, rollback, status, env list|set|rm, logs, resources, db, storage, tasks, backup, flags, previews cost, projects create, plus day-1 health/whoami/…
export SYLPHX_TOKEN=svc_...
export SYLPHX_API_URL=https://api.sylphx.com/v1 # optional
sylphx health --json
sylphx projects list --json
sylphx environments list prj_demo --json
@sylphx/cli version (this package) follows the npm channel.--version reports the Rust crate sylphx-cli version (see
package.json#sylphx.crateVersion).Wire SSOT: Protobuf under api/proto (sylphx.platform.v1). App library:
@sylphx/sdk (TypeScript) / sylphx-sdk (Rust).
cargo install sylphx-cliFAQs
The Sylphx CLI: every Sylphx API method as a command. npm channel of the native sylphx binary.
The npm package @sylphx/cli receives a total of 811 weekly downloads. As such, @sylphx/cli popularity was classified as not popular.
We found that @sylphx/cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.

Security News
Socket CTO Ahmad Nassri discusses how to keep AI agents from bypassing package blocks, limit credential access, and monitor their actions.

Security News
GPT-6 Astra tried to plant malicious code in simulated open source projects using fake GitHub accounts and deceptive PRs during an assigned CTF challenge.

Security News
upm uses Node.js to deliver fast npm installs in about 250 KB, with a JavaScript API and security defaults.