registry / @easbot/skills / 0.3.32
@easbot/skills@0.3.32
⚠ Under reviewSkills management system for EAS Agent ecosystem (add / remove / list / find / update / sync / use)
AI Security Review
scanned 9d ago · by lpm-firewall-aiThe inspected package has no npm lifecycle hook, and the reviewed network and process operations have bounded, product-related uses. The package imports @easbot/utils and @easbot/terminal at runtime, but their source was unavailable in the prepared snapshot, so the full runtime behavior remains unresolved.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
Importing the package or running its CLI loads selected internal dependencies.
Impact
The available source does not establish harmful behavior, but the missing implementations prevent resolving the full runtime behavior.
Mechanism
The package entrypoint imports @easbot/utils, and a loaded chunk imports @easbot/terminal; their implementations were absent from the prepared dependency snapshot.
AI rationale
The inspected package has no npm lifecycle hook, and the reviewed network and process operations have bounded, product-related uses. The package imports @easbot/utils and @easbot/terminal at runtime, but their source was unavailable in the prepared snapshot, so the full runtime behavior remains unresolved.
Evidence
package.jsondist/index.cjsdist/chunks/chunk-JT453POM.mjsdist/cli.mjsdist/chunks/chunk-Q2MOP5ZW.cjsdist/chunks/chunk-BUJVN7F5.mjs
Network endpoints2
add-skill.vercel.sh/tapi.github.com/repos/${n}/git/trees/${encodeURIComponent(r)}?recursive=1
Decision evidence
public snapshotAI called this Manual Review at 77.0% confidence as Unknown with medium false-positive risk.
AI review observations
- package.json declares @easbot/utils and @easbot/terminal as runtime dependencies; the CJS entrypoint and an imported chunk use them, but their implementation sources were absent from the prepared snapshot.
- The inspected manifest has no npm lifecycle hook; its scripts are development, build, test, lint, and publish commands.
- The reviewed telemetry code uses a fixed analytics endpoint and honors DISABLE_TELEMETRY and DO_NOT_TRACK.
- The optional GitHub token is attached to a request for a GitHub repository tree.
Evidence against
- The inspected network calls have product-related purposes, and the telemetry helper has explicit opt-out environment variables.
- The CLI’s agent launch uses child_process.spawn with inherited stdio; no install-time launch was found.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStrings
Source & flagged code
9 flaggeddist/chunks/chunk-OZJ2FZL2.mjsView file
1import {k as k$1}from'./chunk-SBACCZEK.mjs';import {c,s,p,r,a as a$1}from'./chunk-J3HVALCS.mjs';import {b as b$1,c as c$1,d as d$1,l}from'./chunk-BUJVN7F5.mjs';import {a,d,b as b$2...
L2: skills tried your existing git credentials and available fallbacks, but none succeeded.
High
Child Process
Package source references child process execution.
dist/chunks/chunk-OZJ2FZL2.mjsView on unpkg · L1dist/chunks/chunk-OZJ2FZL2.mjs#virtual:string-array:round1View file
1import {k as k$1}from"./chunk-SBACCZEK.mjs";import {c,s,p,r,a as a$1}from"./chunk-J3HVALCS.mjs";import {b as b$1,c as c$1,d as d$1,l}from"./chunk-BUJVN7F5.mjs";import {a,d,b as b$2...
L2: skills tried your existing git credentials and available fallbacks, but none succeeded.
...
L8: Enable it with: git config --global protocol.allowUnsafeFilter true
L9: Or upgrade Git, or unset filter.<driver>.* in the source repo.`:"";throw new c.GitCloneError({message:`Failed to clone ${n}: ${l}${u}`,url:n})}}async function Wn(n){let t=normalize...
L10: source skill path=${c$1.path} (parsed.type=${n.type})
High
Same File Env Network Execution
Findings
3 Critical7 High3 Medium4 Low
CriticalHardcoded Runtime Data Exfiltrationdist/chunks/chunk-BUJVN7F5.mjs
CriticalTrigger Reachable Dangerous Capabilitydist/chunks/chunk-PN4WXZHP.cjs
CriticalPrevious Version Dangerous Deltadist/chunks/chunk-53ASGXQG.cjs
HighChild Processdist/chunks/chunk-OZJ2FZL2.mjs
HighShell
HighSame File Env Network Executiondist/chunks/chunk-OZJ2FZL2.mjs#virtual:string-array:round1
HighCommand Output Exfiltrationdist/chunks/chunk-WWWNIZ4J.mjs
HighCopied Package Dependency Bridgedist/chunks/chunk-XHW5IWDQ.cjs
HighTrigger Reachable Command Output Exfiltrationdist/chunks/chunk-53ASGXQG.cjs
HighSemantic Analysis Limiteddist/chunks/chunk-N7GWP2NB.cjs#virtual:string-array:round1
Affected versions and remediation
This report applies to @easbot/skills@0.3.32.
See all versions of @easbot/skills for other recorded verdicts.
- Review the evidence and your use of @easbot/skills@0.3.32 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.