registry / @jive-sh/skill-sync / 0.4.4
@jive-sh/skill-sync@0.4.4
⚠ Under reviewKeeps one skills directory identical across every machine you work on.
AI Security Review
scanned 10d ago · by lpm-firewall-aiThe inspected installer performs product-aligned daemon registration, but its postinstall path selects a platform-specific self-alias package whose binary source was unavailable. That unresolved executable prevents a clean verdict; the inspected evidence does not establish malicious behavior.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Installing the package runs its postinstall hook; the registered daemon starts at user login.
Impact
The unresolved binary may run persistently with the user's permissions; its behavior could not be determined from this snapshot.
Mechanism
The installer selects a platform package, links its binary into command targets, and registers that executable with the platform service manager.
AI rationale
The inspected installer performs product-aligned daemon registration, but its postinstall path selects a platform-specific self-alias package whose binary source was unavailable. That unresolved executable prevents a clean verdict; the inspected evidence does not establish malicious behavior.
Evidence
package.jsoninstall.cjs
Decision evidence
public snapshotAI called this Manual Review at 78.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The postinstall hook runs install.cjs, and the manifest declares platform-specific optional aliases to other releases of the same package.
- The installer links the selected platform package's binary into the command targets and registers a daemon to start at login.
- The installer invokes daemon registration during postinstall; the registered launch agent is configured to run at login and restart after failure.
- The platform binaries selected by those aliases were not available for source inspection, so their behavior remains unresolved.
Evidence against
- The CLI source describes user-selected skill syncing and passkey login; it does not establish malicious behavior by the unresolved binaries.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
7 flaggedpackage.jsonView file
•scripts.postinstall = node ./install.cjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node ./install.cjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkginstall.cjsView file
3Manifest entrypoint (scripts.postinstall) carries capability families absent from dist/build output: environment+network, execution+network
L3: // CommonJS, not an ES module: a launcher is an extensionless file, and Node 14 and 16 refuse to load an
L4: // extensionless ES module in a "type": "module" package (ERR_UNKNOWN_FILE_EXTENSION; Node 18.20 accepts it). bin/package.json marks this directory
L5: // "commonjs", and the install script is install.cjs, so both load the same way on every Node and on Bun.
L6: const { spawnSync } = require("child_process");
L7: const {
...
L81: const packageJsonPath = require.resolve(`${PLATFORM_PACKAGES[platformKey]}/package.json`);
L82: const packageJson = JSON.parse(readFileSync(packageJsonPath, "utf-8"));
L83: return {
...
L97: * package manager: on an
Findings
5 High5 Medium4 Low
HighInstall Time Lifecycle Scriptspackage.json
HighEntrypoint Build Divergenceinstall.cjs
HighTrigger Reachable Persistenceinstall.cjs
HighSemantic Analysis Limitedbin/skill-sync#virtual:normalized:round1
HighPrevious Version Dangerous Deltadist/entrypoints/skill-sync.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistenceinstall.cjs
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @jive-sh/skill-sync@0.4.4.
See all versions of @jive-sh/skill-sync for other recorded verdicts.
- Review the evidence and your use of @jive-sh/skill-sync@0.4.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.