registry / @easbot/skills / 0.3.24
@easbot/skills@0.3.24
Skills management system for EAS Agent ecosystem (add / remove / list / find / update / sync / use)
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe scanner's command-execution finding resolves to a user-invoked skills use flow that launches the selected agent command. The inspected telemetry is disclosed, opt-out, and showed no command-output or credential collection.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user invokes a CLI command; agent launching occurs through the skills use flow.
Impact
No unauthorized command execution, secret collection, or command-output transmission was identified.
Mechanism
The helper launches the selected claude or codex command with inherited stdio. Documented telemetry is opt-out and sends event data to the skills service.
AI rationale
The scanner's command-execution finding resolves to a user-invoked skills use flow that launches the selected agent command. The inspected telemetry is disclosed, opt-out, and showed no command-output or credential collection.
Network endpoints4
add-skill.vercel.sh/tadd-skill.vercel.sh/auditskills.sh/api/searchapi.github.com/repos/${owner}/${repo}
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest has no preinstall, install, or postinstall hook; its scripts are development, build, test, lint, and publish commands.
- The CLI dispatches skills commands on invocation; its agent-launch helper starts the selected command with inherited stdio.
- Telemetry is disclosed as skills.sh telemetry and audit reporting, has DISABLE_TELEMETRY and DO_NOT_TRACK opt-outs, and does not include command output in the inspected payload.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
6 flaggeddist/chunks/chunk-XHQOE5S3.mjsView file
1import {b as b$1,a as a$1,d,c as c$2}from'./chunk-CFMOYU7R.mjs';import {f as f$1,d as d$1,e as e$1,b as b$4,a as a$3,c as c$1,r,w,y as y$1,u,t as t$1,s as s$1,p as p$1,l as l$3,m a...
L2: `);if(!(s&&t.hideBoxWhenEmpty)){let l=s?t.emptyTitle??t.title:t.title;l?note(n,l):console.log(n);}t.outro&&!t.skipOutro?Prompt.outro(t.outro):t.skipOutro||Prompt.outro(c$1("Done!")...
High
Child Process
Package source references child process execution.
dist/chunks/chunk-XHQOE5S3.mjsView on unpkg · L11import {b as b$1,a as a$1,d,c as c$2}from'./chunk-CFMOYU7R.mjs';import {f as f$1,d as d$1,e as e$1,b as b$4,a as a$3,c as c$1,r,w,y as y$1,u,t as t$1,s as s$1,p as p$1,l as l$3,m a...
L2: `);if(!(s&&t.hideBoxWhenEmpty)){let l=s?t.emptyTitle??t.title:t.title;l?note(n,l):console.log(n);}t.outro&&!t.skipOutro?Prompt.outro(t.outro):t.skipOutro||Prompt.outro(c$1("Done!")...
...
L5: `),e$1("Global Skills Update")),Prompt.outro(`${c$1("Done!")}${a$3(" Run `easbot skills list` to see current state.")}`),{successCount:l,failCount:o,checkedCount:$}}async function...
L6: `),e$1("Project Skills Update")),Prompt.outro(`${c$1("Done!")}${a$3(" Run `easbot skills list` to see current state.")}`);}else note(`${c$1("All project skills are up to date.")}`...
L7: `))Prompt.Log.message(a$3(k));await fe(p
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/chunks/chunk-XHQOE5S3.mjsFindings
1 Critical6 High2 Medium4 Low
CriticalPrevious Version Dangerous Deltadist/chunks/chunk-LOQF6V7I.cjs
HighChild Processdist/chunks/chunk-XHQOE5S3.mjs
HighShell
HighSame File Env Network Executiondist/chunks/chunk-XHQOE5S3.mjs
HighCommand Output Exfiltrationdist/chunks/chunk-XHQOE5S3.mjs
HighTrigger Reachable Command Output Exfiltrationdist/chunks/chunk-LOQF6V7I.cjs
HighSemantic Analysis Limiteddist/chunks/chunk-HOK3SUH4.cjs#virtual:string-array:round1
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @easbot/skills@0.3.24.
See all versions of @easbot/skills for other recorded verdicts.
- Review the evidence and your use of @easbot/skills@0.3.24 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.