@easbot/skills@0.3.29
Skills management system for EAS Agent ecosystem (add / remove / list / find / update / sync / use)
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe package automatically sends skill installation metadata to its telemetry service, including source identifiers and relative skill paths; the README does not describe this event collection. The behavior is opt-out and shows no credential or command-output theft, so a warning is appropriate.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user invokes a CLI skill installation; the telemetry event is queued and the CLI flushes telemetry on exit.
Impact
The service receives details about the source and skills used in the user's project. The README describes audit and security-gate reporting but not this installation-event collection.
Mechanism
The install event sends the source identifier, skill names, target agents and relative skill file paths as event fields to the telemetry endpoint. Telemetry can be disabled with DISABLE_TELEMETRY or DO_NOT_TRACK.
AI rationale
The package automatically sends skill installation metadata to its telemetry service, including source identifiers and relative skill paths; the README does not describe this event collection. The behavior is opt-out and shows no credential or command-output theft, so a warning is appropriate.
Evidence
dist/chunks/chunk-WVT5DNGG.cjsdist/chunks/chunk-CFMOYU7R.mjsREADME.en.md
Network endpoints2
add-skill.vercel.sh/tadd-skill.vercel.sh/audit
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- After a CLI skill installation, the package automatically tracks the source, skill names, target agents and relative SKILL.md paths.
- Telemetry is enabled by default and sends event fields to https://add-skill.vercel.sh/t; users can disable it with DISABLE_TELEMETRY or DO_NOT_TRACK.
- The telemetry sender puts supplied event fields into a query string; the installation event includes project skill metadata.
- The README mentions audit and security-gate telemetry, but does not describe automatic reporting of installation events and skill paths.
Evidence against
- The manifest declares no install, preinstall or postinstall lifecycle hook.
- The CLI performs telemetry as part of a user-invoked command, and the reporter has opt-out environment variables.
- The inspected telemetry payload contains skill and source metadata, with no evidence of credential, environment-variable or command-output collection.
- The README does disclose telemetry and audit reporting to skills.sh.
Behavioral surface
ChildProcessCrypto
Source & flagged code
6 flaggeddist/chunks/chunk-LYBW46O5.mjsView file
1import {p as p$1,J as J$1}from'./chunk-HHKUUSIW.mjs';import {o as o$1}from'./chunk-53MET7OO.mjs';import {readFile,mkdir,writeFile}from'fs/promises';import {join,dirname}from'path';...
L2: ${Symbol.colorize(Symbol.bar.vertical,"warning")} ${y(`Tip: set ${a("GITHUB_TOKEN")} to avoid this prompt, or use ${a("--full-depth")} to clone instead.
High
Child Process
Package source references child process execution.
dist/chunks/chunk-LYBW46O5.mjsView on unpkg · L1dist/chunks/chunk-ZZKPPANC.cjs#virtual:string-array:round1View file
1"use strict";var chunkVYLNYGPH_cjs=require("./chunk-VYLNYGPH.cjs"),chunk5UQDC6B4_cjs=require("./chunk-5UQDC6B4.cjs"),chunkDNE3XPCJ_cjs=require("./chunk-DNE3XPCJ.cjs"),chunkE7AHWFZN...
L2: skills tried your existing git credentials and available fallbacks, but none succeeded.
...
L8: Enable it with: git config --global protocol.allowUnsafeFilter true
L9: Or upgrade Git, or unset filter.<driver>.* in the source repo.`:"";throw new v(`Failed to clone ${n}: ${l}${u}`,n,false,false)}}async function Wn(n){let t=path.normalize(path.resol...
L10: source skill path=${c.path} (parsed.type=${n.type})
High
Findings
1 Critical6 High2 Medium4 Low
CriticalPrevious Version Dangerous Deltadist/chunks/chunk-WVT5DNGG.cjs
HighChild Processdist/chunks/chunk-LYBW46O5.mjs
HighShell
HighSame File Env Network Executiondist/chunks/chunk-ZZKPPANC.cjs#virtual:string-array:round1
HighCommand Output Exfiltrationdist/chunks/chunk-WVT5DNGG.cjs
HighTrigger Reachable Command Output Exfiltrationdist/chunks/chunk-WVT5DNGG.cjs
HighSemantic Analysis Limiteddist/chunks/chunk-HHKUUSIW.mjs#virtual:string-array:round1
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @easbot/skills@0.3.29.
See all versions of @easbot/skills for other recorded verdicts.
- Review the evidence and your use of @easbot/skills@0.3.29 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.