registry / @easbot/skills / 0.3.19
@easbot/skills@0.3.19
Skills management system for EAS Agent ecosystem (add / remove / list / find / update / sync / use)
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe reviewed source links its process execution and network access to the package's stated skills-management features. The disclosed runtime telemetry can be disabled, and the command-output exfiltration signal is not supported by the inspected agent-launch code.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Search network access occurs on a search command; agent launch requires an explicit skills-use option. CLI telemetry runs during normal CLI operation and can be disabled.
Impact
Expected skill discovery, audit and agent-launch behavior; no malicious impact identified.
Mechanism
Search requests retrieve skill listings, telemetry and audit requests go to skills.sh, and selected agent processes receive the generated prompt with inherited stdio. No command output exfiltration was identified.
AI rationale
The reviewed source links its process execution and network access to the package's stated skills-management features. The disclosed runtime telemetry can be disabled, and the command-output exfiltration signal is not supported by the inspected agent-launch code.
Network endpoints4
skills.shadd-skill.vercel.shapi.github.comgithub.com
Decision evidence
public snapshotAI called this Clean at 93.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest describes a skills management package and defines CLI and library entry points; it declares no install lifecycle scripts.
- The CLI can launch a supported agent only when the user selects that option, passing it the generated skill prompt with inherited stdio.
- The search command sends its query and optional owner to the skills API to retrieve skill listings.
- The README discloses telemetry and audit requests to skills.sh, and the implementation provides DISABLE_TELEMETRY and DO_NOT_TRACK opt-outs.
Evidence against
- The package uses child-process and network APIs, which are appropriate for its agent-launch, repository and skill-search features.
- The scanner flagged command-output handling, but the optional agent process uses inherited stdio rather than capturing output for transmission.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
Source & flagged code
6 flaggeddist/chunks/chunk-HOK3SUH4.cjsView file
1'use strict';var chunkJUNIAQ2A_cjs=require('./chunk-JUNIAQ2A.cjs'),chunkXGUPIAAF_cjs=require('./chunk-XGUPIAAF.cjs'),chunkDNE3XPCJ_cjs=require('./chunk-DNE3XPCJ.cjs'),chunkE7AHWFZN...
L2: skills tried your existing git credentials and available fallbacks, but none succeeded.
High
Child Process
Package source references child process execution.
dist/chunks/chunk-HOK3SUH4.cjsView on unpkg · L1dist/chunks/chunk-HOK3SUH4.cjs#virtual:string-array:round1View file
1"use strict";var chunkJUNIAQ2A_cjs=require("./chunk-JUNIAQ2A.cjs"),chunkXGUPIAAF_cjs=require("./chunk-XGUPIAAF.cjs"),chunkDNE3XPCJ_cjs=require("./chunk-DNE3XPCJ.cjs"),chunkE7AHWFZN...
L2: skills tried your existing git credentials and available fallbacks, but none succeeded.
...
L8: Enable it with: git config --global protocol.allowUnsafeFilter true
L9: Or upgrade Git, or unset filter.<driver>.* in the source repo.`:"";throw new L(`Failed to clone ${n}: ${l}${u}`,n,false,false)}}async function In(n){let t=path.normalize(path.resol...
L10: source skill path=${c.path} (parsed.type=${n.type})
High
Same File Env Network Execution
Findings
1 Critical6 High2 Medium4 Low
CriticalPrevious Version Dangerous Deltadist/chunks/chunk-XW6PYFNJ.cjs
HighChild Processdist/chunks/chunk-HOK3SUH4.cjs
HighShell
HighSame File Env Network Executiondist/chunks/chunk-HOK3SUH4.cjs#virtual:string-array:round1
HighCommand Output Exfiltrationdist/chunks/chunk-XW6PYFNJ.cjs
HighTrigger Reachable Command Output Exfiltrationdist/chunks/chunk-XW6PYFNJ.cjs
HighSemantic Analysis Limiteddist/chunks/chunk-HOK3SUH4.cjs#virtual:string-array:round1
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @easbot/skills@0.3.19.
See all versions of @easbot/skills for other recorded verdicts.
- Review the evidence and your use of @easbot/skills@0.3.19 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.