registry / @jive-sh/skill-sync / 0.6.1
@jive-sh/skill-sync@0.6.1
Keeps one skills directory identical across every machine you work on.
AI Security Review
scanned 1d ago · by lpm-firewall-aiThe postinstall hook does establish a persistent daemon, but the README clearly describes that behavior as part of skill-sync. Network syncing requires browser passkey sign-in, folder and skill selection governs what is synced, and the reported account usage is disclosed.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
npm postinstall registers and starts the daemon; syncing and account reporting require a signed-in session.
Impact
Expected package behavior: selected skills synchronize across machines, and account usage appears on the dashboard.
Mechanism
The daemon syncs only server-selected skills in enabled folders and sends disclosed account usage to the configured service.
AI rationale
The postinstall hook does establish a persistent daemon, but the README clearly describes that behavior as part of skill-sync. Network syncing requires browser passkey sign-in, folder and skill selection governs what is synced, and the reported account usage is disclosed.
Evidence
~/.jive/skill-sync.json~/.jive/skill-sync-token.json~/.jive/skill-sync-state.json~/.jive/daemons/*.json~/.jive/logs/*.log~/Library/LaunchAgents/*.plist~/.config/systemd/user/*.servicebin/skill-syncbin/skill-sync-daemon
Network endpoints1
skill-sync.jive.sh
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The README discloses that installation registers the package's sync daemon to start at login and that it checks for updates every five minutes.
- Syncing requires a browser passkey sign-in; the service sends a per-machine token directly to the daemon.
- The server controls which skills and folders sync, and folders start disabled until selected.
- Account usage collection is disclosed: the daemon queries the agent CLIs and sends account identity and usage details to the dashboard; the README says it reads no credential files.
- The default service endpoint is skill-sync.jive.sh.
Evidence against
- A postinstall hook runs install.cjs, which registers and starts a persistent daemon by default.
- The daemon reads account usage and supports syncing skill files, so its normal operation accesses and transmits user data.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkWebSocket
Source & flagged code
7 flaggedpackage.jsonView file
•scripts.postinstall = node ./install.cjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node ./install.cjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkginstall.cjsView file
3Manifest entrypoint (scripts.postinstall) carries capability families absent from dist/build output: environment+network, execution+network
L3: // CommonJS, not an ES module: a launcher is an extensionless file, and Node 14 and 16 refuse to load an
L4: // extensionless ES module in a "type": "module" package (ERR_UNKNOWN_FILE_EXTENSION; Node 18.20 accepts it). bin/package.json marks this directory
L5: // "commonjs", and the install script is install.cjs, so both load the same way on every Node and on Bun.
L6: const { spawnSync } = require("child_process");
L7: const {
...
L96: const packageJsonPath = require.resolve(`${PLATFORM_PACKAGES[platformKey]}/package.json`);
L97: const packageJson = JSON.parse(readFileSync(packageJsonPath, "utf-8"));
L98: return {
...
L112: * package manager: on an
Findings
5 High5 Medium4 Low
HighInstall Time Lifecycle Scriptspackage.json
HighEntrypoint Build Divergenceinstall.cjs
HighTrigger Reachable Persistenceinstall.cjs
HighSemantic Analysis Limitedbin/skill-sync#virtual:normalized:round1
HighPrevious Version Dangerous Deltadist/internal/agents/command.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistenceinstall.cjs
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @jive-sh/skill-sync@0.6.1.
See all versions of @jive-sh/skill-sync for other recorded verdicts.
- Review the evidence and your use of @jive-sh/skill-sync@0.6.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.