@agent-native/skills@0.3.53
Install BuilderIO skills for coding agents.
AI Security Review
scanned 6d ago · by lpm-firewall-aiNo malicious install-time behavior was identified. In the direct CLI failure path, telemetry sends raw error text and stack traces that may disclose local paths despite the source's stated privacy limits, so this merits a warning rather than a publish block.
Static reason
No blocking static signals were detected.
Trigger
A CLI failure while AGENT_NATIVE_SKILLS_DIRECT=1 is set.
Impact
Local path or other diagnostic details may reach the first-party analytics service.
Mechanism
The failure handler reports the raw error message and exception capture adds the message and stack to telemetry POSTs.
AI rationale
No malicious install-time behavior was identified. In the direct CLI failure path, telemetry sends raw error text and stack traces that may disclose local paths despite the source's stated privacy limits, so this merits a warning rather than a publish block.
Evidence
dist/index.jsdist/telemetry.js~/.agent-native/installation-id
Network endpoints1
analytics.agent-native.com/track
Decision evidence
public snapshotAI called this Suspicious at 84.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- On CLI failures, the handler sends the raw error message and calls exception capture.
- Exception capture includes the error message and stack trace, which can contain local paths.
- Telemetry sends event data by POST to the first-party analytics endpoint.
- This reporting branch runs only when AGENT_NATIVE_SKILLS_DIRECT=1; otherwise the CLI delegates to @agent-native/core.
- The manifest has no install, preinstall, or postinstall lifecycle script.
- The telemetry source documents random IDs and opt-out variables, but also claims paths are never reported.
Evidence against
- Package import does not itself run the CLI; the package exposes a separate command entry point.
- The telemetry endpoint is first-party, and the telemetry can be disabled with DO_NOT_TRACK=1 or AGENT_NATIVE_TELEMETRY_DISABLED=1.
- No install-time collection or unrelated collector was identified.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
Source & flagged code
5 flaggeddist/index.jsView file
1import { spawnSync } from "node:child_process";
L2: import { randomUUID } from "node:crypto";
High
433catch (error) {
telemetry.track("skills_cli failed", {
command: parsed.command,
error: error instanceof Error ? error.message : String(error),
durationMs: Date.now() - startedAt,
});
telemetry.captureException(error, {
handled: false,
tags: { source: "sk[redacted]", com
Medium
Ai Review Evidence
On CLI failures, the handler sends the raw error message and calls exception capture.
dist/index.jsView on unpkg · L433dist/index.js#virtual:normalized:round1View file
32--force Overwrite a different existing PR Visual Recap workflow
L33: --no-mcp Install skill files only; skip registering the app"s MCP server\n --no-connect Register MCP where possible but skip inline browser/devic...
L34: return file;
Findings
4 High4 Medium4 Low
HighChild Processdist/index.js
HighShell
HighSame File Env Network Executiondist/index.js#virtual:normalized:round1
HighSemantic Analysis Limiteddist/index.js#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumAi Review Evidencedist/index.js
MediumAi Review Evidencedist/telemetry.js
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @agent-native/skills@0.3.53.
See all versions of @agent-native/skills for other recorded verdicts.
- Review the evidence and your use of @agent-native/skills@0.3.53 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.