registry / @playlist-tech/enterprise-skills / 1.7.5-enterprise.1
@playlist-tech/enterprise-skills@1.7.5-enterprise.1
An enterprise-customizable fork of Vercel Labs' skills CLI for internal skill registries.
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe reviewed code uses GitHub credentials only for GitHub API requests, and plugin recipes are shown for user review rather than executed. The disclosed telemetry has disable and endpoint override settings, so the behavior matches the package's CLI purpose.
Static reason
One or more suspicious static signals were detected.
Trigger
The CLI runs when a user invokes one of its commands. With no arguments it only shows a banner.
Impact
Expected CLI behavior: retrieving or installing requested skills and reporting anonymous usage events.
Mechanism
Commands fetch skills or plugin recipes, use GitHub credentials for GitHub API requests, and can install requested skills. Public-source usage telemetry is sent by default and can be disabled.
AI rationale
The reviewed code uses GitHub credentials only for GitHub API requests, and plugin recipes are shown for user review rather than executed. The disclosed telemetry has disable and endpoint override settings, so the behavior matches the package's CLI purpose.
Network endpoints3
api.github.comadd-skill.vercel.shskills.sh
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package exposes a CLI; its lifecycle scripts build the package and run Husky setup.
- GitHub credentials are read from GitHub-specific environment variables or the GitHub CLI login, then used as bearer credentials for GitHub API requests.
- Telemetry is sent only for public sources by default; private-source telemetry requires a custom endpoint and an explicit setting.
- The README describes telemetry as anonymous and documents ways to disable it or change its endpoint.
- Plugin install recipes are displayed for review and are not run by the CLI.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
WildcardDependency
Source & flagged code
3 flaggeddist/_chunks/libs/simple-git.mjsView file
4import { Buffer as Buffer$1 } from "node:buffer";
L5: import { spawn } from "child_process";
L6: import { normalize } from "node:path";
High
Child Process
Package source references child process execution.
dist/_chunks/libs/simple-git.mjsView on unpkg · L4dist/cli.mjsView file
•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation.
;
}
function isvalidrelativepath(path) {
return path.startswith("./");
}
async function getpluginskillpaths(basepath) {
const searchdirs = [];
const addpluginskillpaths = (pluginbase, skills) => {
if (!iscontainedin(pluginbase, basepath)) return;
if (skills && skills.length > 0) for (const skillpath of skills) {
if (!isvalidrelativepath(skillpath)) continue;
const skilldir = dirname(join(pluginbase, skillpath));
if (iscontainedin(skilldir, basepath)) searchdirs.push(skilldir);
}
searchdirs.push(join(pluginbase, "skills"));
};
try {
const content = await readfile(join(basepath, ".claude-plugin/marketplace.json"), "utf-8");
const manifest = json.parse(con
High
Findings
4 High3 Medium5 Low
HighChild Processdist/_chunks/libs/simple-git.mjs
HighShell
HighTrigger Reachable External Ai Agent Control Surface Mutationdist/cli.mjs
HighCross File Remote Execution Contextdist/cli.mjs
MediumNetwork
MediumEnvironment Vars
MediumWildcard Dependency
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @playlist-tech/enterprise-skills@1.7.5-enterprise.1.
See all versions of @playlist-tech/enterprise-skills for other recorded verdicts.
- Review the evidence and your use of @playlist-tech/enterprise-skills@1.7.5-enterprise.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.