@easbot/skills@0.3.22
Skills management system for EAS Agent ecosystem (add / remove / list / find / update / sync / use)
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe package sends install-event details that identify the selected repository and skills to a telemetry endpoint. The README mentions telemetry generally, but does not describe these fields; this is a warning-level runtime telemetry concern, not evidence of credential theft or command-output exfiltration.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user runs the CLI skill installation flow for a source repository.
Impact
The service learns which repository and skills the user installs. No credential theft or command-output exfiltration was identified.
Mechanism
The install flow queues an install event with repository, skill, agent, and relative skill-file details; the CLI flushes telemetry on exit. DISABLE_TELEMETRY or DO_NOT_TRACK disables sending.
AI rationale
The package sends install-event details that identify the selected repository and skills to a telemetry endpoint. The README mentions telemetry generally, but does not describe these fields; this is a warning-level runtime telemetry concern, not evidence of credential theft or command-output exfiltration.
Evidence
dist/chunks/chunk-42XRKOEA.cjsdist/chunks/chunk-CFMOYU7R.mjsdist/cli.mjsREADME.en.md
Network endpoints2
add-skill.vercel.sh/tadd-skill.vercel.sh/audit
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- After a skill install, the code queues telemetry containing the selected repository source, skill names, agent names, and skill file paths.
- Telemetry is sent to https://add-skill.vercel.sh/t by default; DISABLE_TELEMETRY and DO_NOT_TRACK disable it.
- The README acknowledges telemetry generally, and the CLI flushes queued telemetry when it exits, but the README excerpt does not describe these install-event fields.
Evidence against
- The manifest has no install, preinstall, or postinstall lifecycle hook.
- Telemetry runs after an explicit CLI operation and has opt-out environment variables.
- The reviewed flow shows no credential collection or command-output transmission.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
6 flaggeddist/chunks/chunk-MYZQNUHR.mjsView file
1import {b as b$1,a as a$1,d,c as c$2}from'./chunk-CFMOYU7R.mjs';import {f as f$1,d as d$1,e as e$1,b as b$4,a as a$3,c as c$1,r,w,y as y$1,u,t as t$1,s as s$1,p as p$1,l as l$3,m a...
L2: `);if(!(s&&t.hideBoxWhenEmpty)){let l=s?t.emptyTitle??t.title:t.title;l?note(n,l):console.log(n);}t.outro&&!t.skipOutro?Prompt.outro(t.outro):t.skipOutro||Prompt.outro(c$1("Done!")...
High
Child Process
Package source references child process execution.
dist/chunks/chunk-MYZQNUHR.mjsView on unpkg · L11import {b as b$1,a as a$1,d,c as c$2}from'./chunk-CFMOYU7R.mjs';import {f as f$1,d as d$1,e as e$1,b as b$4,a as a$3,c as c$1,r,w,y as y$1,u,t as t$1,s as s$1,p as p$1,l as l$3,m a...
L2: `);if(!(s&&t.hideBoxWhenEmpty)){let l=s?t.emptyTitle??t.title:t.title;l?note(n,l):console.log(n);}t.outro&&!t.skipOutro?Prompt.outro(t.outro):t.skipOutro||Prompt.outro(c$1("Done!")...
...
L5: `),e$1("Global Skills Update")),Prompt.outro(`${c$1("Done!")}${a$3(" Run `easbot skills list` to see current state.")}`),{successCount:l,failCount:o,checkedCount:$}}async function...
L6: `),e$1("Project Skills Update")),Prompt.outro(`${c$1("Done!")}${a$3(" Run `easbot skills list` to see current state.")}`);}else note(`${c$1("All project skills are up to date.")}`...
L7: `))Prompt.Log.message(a$3(k));await fe(p
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/chunks/chunk-MYZQNUHR.mjsFindings
1 Critical6 High2 Medium4 Low
CriticalPrevious Version Dangerous Deltadist/chunks/chunk-42XRKOEA.cjs
HighChild Processdist/chunks/chunk-MYZQNUHR.mjs
HighShell
HighSame File Env Network Executiondist/chunks/chunk-MYZQNUHR.mjs
HighCommand Output Exfiltrationdist/chunks/chunk-MYZQNUHR.mjs
HighTrigger Reachable Command Output Exfiltrationdist/chunks/chunk-42XRKOEA.cjs
HighSemantic Analysis Limiteddist/chunks/chunk-HOK3SUH4.cjs#virtual:string-array:round1
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @easbot/skills@0.3.22.
See all versions of @easbot/skills for other recorded verdicts.
- Review the evidence and your use of @easbot/skills@0.3.22 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.