registry / @easbot/skills / 0.3.21
@easbot/skills@0.3.21
Skills management system for EAS Agent ecosystem (add / remove / list / find / update / sync / use)
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe flagged execution is reachable through an explicit skill-use command and launches only a user-selected agent with the selected skill prompt. The manifest has no install hook, and the documented runtime telemetry has opt-out controls; the reviewed source shows no concrete attack behavior.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Explicit CLI commands; launching an agent requires selecting one with the `skills use --agent` option.
Impact
No malicious impact identified from the reviewed source.
Mechanism
The CLI searches skills.sh, prepares a selected skill as a prompt, and can pass that prompt to a named agent. Runtime telemetry is documented and can be disabled through environment variables.
AI rationale
The flagged execution is reachable through an explicit skill-use command and launches only a user-selected agent with the selected skill prompt. The manifest has no install hook, and the documented runtime telemetry has opt-out controls; the reviewed source shows no concrete attack behavior.
Network endpoints3
skills.shadd-skill.vercel.sh/tadd-skill.vercel.sh/audit
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package describes itself as an agent skills management CLI and exposes CLI and library entry points.
- The manifest declares no install, preinstall, or postinstall lifecycle hook.
- The flagged process launch is in the `skills use` flow and occurs only when an agent option is supplied; it launches the named agent with the skill prompt.
- The package documents telemetry to skills.sh, and the source provides `DISABLE_TELEMETRY` and `DO_NOT_TRACK` opt-outs.
- The skills search request goes to skills.sh, configurable through `SKILLS_API_URL`.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
6 flaggeddist/chunks/chunk-7SOBUI7V.cjsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @easbot/skills@0.3.13
matchedIdentity = npm:QGVhc2JvdC9za2lsbHM:0.3.13
similarity = 0.818
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/chunks/chunk-7SOBUI7V.cjsView on unpkg1'use strict';var chunkQ2MOP5ZW_cjs=require('./chunk-Q2MOP5ZW.cjs'),chunkBWDTT6SA_cjs=require('./chunk-BWDTT6SA.cjs'),chunkLJ63Q26N_cjs=require('./chunk-LJ63Q26N.cjs'),chunkIJI72D6W...
L2: `);if(!(s&&t.hideBoxWhenEmpty)){let l=s?t.emptyTitle??t.title:t.title;l?terminal.note(n,l):console.log(n);}t.outro&&!t.skipOutro?terminal.Prompt.outro(t.outro):t.skipOutro||termina...
High
Child Process
Package source references child process execution.
dist/chunks/chunk-7SOBUI7V.cjsView on unpkg · L11'use strict';var chunkQ2MOP5ZW_cjs=require('./chunk-Q2MOP5ZW.cjs'),chunkBWDTT6SA_cjs=require('./chunk-BWDTT6SA.cjs'),chunkLJ63Q26N_cjs=require('./chunk-LJ63Q26N.cjs'),chunkIJI72D6W...
L2: `);if(!(s&&t.hideBoxWhenEmpty)){let l=s?t.emptyTitle??t.title:t.title;l?terminal.note(n,l):console.log(n);}t.outro&&!t.skipOutro?terminal.Prompt.outro(t.outro):t.skipOutro||termina...
...
L5: `),chunkBWDTT6SA_cjs.e("Global Skills Update")),terminal.Prompt.outro(`${chunkBWDTT6SA_cjs.c("Done!")}${chunkBWDTT6SA_cjs.a(" Run `easbot skills list` to see current state.")}`),{...
L6: `),chunkBWDTT6SA_cjs.e("Project Skills Update")),terminal.Prompt.outro(`${chunkBWDTT6SA_cjs.c("Done!")}${chunkBWDTT6SA_cjs.a(" Run `easbot skills list` to see current state.")}`);...
L7: `))terminal.Prompt.Log.message(chunkBWDT
Findings
1 Critical6 High2 Medium4 Low
CriticalPrevious Version Dangerous Deltadist/chunks/chunk-7SOBUI7V.cjs
HighChild Processdist/chunks/chunk-7SOBUI7V.cjs
HighShell
HighSame File Env Network Executiondist/chunks/chunk-7SOBUI7V.cjs
HighCommand Output Exfiltrationdist/chunks/chunk-7SOBUI7V.cjs
HighTrigger Reachable Command Output Exfiltrationdist/chunks/chunk-7SOBUI7V.cjs
HighSemantic Analysis Limiteddist/chunks/chunk-HOK3SUH4.cjs#virtual:string-array:round1
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @easbot/skills@0.3.21.
See all versions of @easbot/skills for other recorded verdicts.
- Review the evidence and your use of @easbot/skills@0.3.21 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.