registry / @playlist-tech/enterprise-skills / 1.7.4-enterprise.7
@playlist-tech/enterprise-skills@1.7.4-enterprise.7
An enterprise-customizable fork of Vercel Labs' skills CLI for internal skill registries.
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe findings are consistent with a skill-management CLI: GitHub credentials are sent to GitHub API requests, and agent hook writes follow user-invoked install or setup operations. Runtime usage telemetry is disclosed with opt-out controls, and no credential exfiltration or concealed execution was found.
Static reason
One or more suspicious static signals were detected.
Trigger
User-invoked CLI operations such as adding a skill, or telemetry associated with those operations.
Impact
No malicious impact identified. The observed file changes and network activity support the CLI’s stated purpose.
Mechanism
Fetches repository data from GitHub, installs selected skills, and may write configured agent hooks; telemetry reports install metadata for eligible public sources.
AI rationale
The findings are consistent with a skill-management CLI: GitHub credentials are sent to GitHub API requests, and agent hook writes follow user-invoked install or setup operations. Runtime usage telemetry is disclosed with opt-out controls, and no credential exfiltration or concealed execution was found.
Evidence
.codex/hooks.json.claude/settings.json.cursor/hooks.json.copilot/hooks/skills.jsonagent-specific skill directories selected for installation
Network endpoints3
api.github.comadd-skill.vercel.shskills.sh
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package exposes a CLI whose bin entry imports the CLI bundle.
- GitHub tokens are used as bearer credentials for GitHub API requests to retrieve repository data.
- Agent hook writes occur during a skill installation command; hook commands must be supplied through environment variables.
- The README describes anonymous usage telemetry and documents opt-out controls; install events can include public source, skill, agent, and skill-file metadata.
Evidence against
- Usage telemetry can send public repository and skill metadata, but it is tied to CLI operations, documented, and can be disabled.
- The CLI can write agent skill and hook files, but the reviewed writes are part of explicit skill installation or setup commands.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
3 flaggeddist/_chunks/libs/simple-git.mjsView file
4import { Buffer as Buffer$1 } from "node:buffer";
L5: import { spawn } from "child_process";
L6: import { normalize } from "node:path";
High
Child Process
Package source references child process execution.
dist/_chunks/libs/simple-git.mjsView on unpkg · L4dist/cli.mjsView file
•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation.
;
}
function isvalidrelativepath(path) {
return path.startswith("./");
}
async function getpluginskillpaths(basepath) {
const searchdirs = [];
const addpluginskillpaths = (pluginbase, skills) => {
if (!iscontainedin(pluginbase, basepath)) return;
if (skills && skills.length > 0) for (const skillpath of skills) {
if (!isvalidrelativepath(skillpath)) continue;
const skilldir = dirname(join(pluginbase, skillpath));
if (iscontainedin(skilldir, basepath)) searchdirs.push(skilldir);
}
searchdirs.push(join(pluginbase, "skills"));
};
try {
const content = await readfile(join(basepath, ".claude-plugin/marketplace.json"), "utf-8");
const manifest = json.parse(con
High
Findings
4 High3 Medium5 Low
HighChild Processdist/_chunks/libs/simple-git.mjs
HighShell
HighTrigger Reachable External Ai Agent Control Surface Mutationdist/cli.mjs
HighCross File Remote Execution Contextdist/cli.mjs
MediumNetwork
MediumEnvironment Vars
MediumWildcard Dependency
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @playlist-tech/enterprise-skills@1.7.4-enterprise.7.
See all versions of @playlist-tech/enterprise-skills for other recorded verdicts.
- Review the evidence and your use of @playlist-tech/enterprise-skills@1.7.4-enterprise.7 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.