registry / @lion1ou/skill-ctl / 1.2.0
@lion1ou/skill-ctl@1.2.0
Configuration-driven Agent Skill catalog installer.
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe flagged process execution and network access are tied to searching for and installing user-selected skills, which matches the package's stated purpose. The package does not declare install-time hooks that perform those actions.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The welcome menu runs when the CLI starts without arguments; downloads and installation follow explicit user CLI selections.
Impact
No automatic credential collection, unrelated data transfer, or unrequested account action was found.
Mechanism
The CLI searches skills.sh and uses npx to cache selected external skills before distributing them to configured targets.
AI rationale
The flagged process execution and network access are tied to searching for and installing user-selected skills, which matches the package's stated purpose. The package does not declare install-time hooks that perform those actions.
Network endpoints1
skills.sh
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package's lifecycle scripts run build or tests; no install-time hook is declared.
- The CLI init hook only opens the welcome menu when invoked without arguments.
- External skill downloads run as part of the install command after skills are selected.
- The only identified network endpoint is skills.sh's search API, used to find external skills.
Evidence against
- The package launches npx to download selected external skills into its cache.
- The CLI can write selected skills to configured agent directories.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
4 flaggeddist/dev-session.jsView file
1import { execFileSync, spawn } from 'node:child_process';
L2: import { readFileSync } from 'node:fs';
High
Child Process
Package source references child process execution.
dist/dev-session.jsView on unpkg · L1dist/core/skills-source.jsView file
21export function inspectPackageSkills(packageId) {
L22: const result = spawnSync('npx', ['-y', 'skills', 'add', packageId, '-l'], {
L23: encoding: 'utf8',
High
Runtime Package Install
Package source invokes a package manager install command at runtime.
dist/core/skills-source.jsView on unpkg · L21dist/core/workspace-picker.js#virtual:normalized:round1View file
Findings
1 Critical3 High3 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/core/catalog-install.js
HighChild Processdist/dev-session.js
HighRuntime Package Installdist/core/skills-source.js
HighSemantic Analysis Limiteddist/core/workspace-picker.js#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @lion1ou/skill-ctl@1.2.0.
See all versions of @lion1ou/skill-ctl for other recorded verdicts.
- Review the evidence and your use of @lion1ou/skill-ctl@1.2.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.