registry / @skillsmith/cli / 0.8.6
@skillsmith/cli@0.8.6
Publish versioned agent skills to a team-scoped registry, catch drift across installs, and deprecate what's gone stale.
Static Scan Results
scanned 3mo ago · by rust-scannerStatic analysis flagged 16 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Decision evidence
public snapshotBehavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsPossibleObfuscationTelemetryUrlStrings
Source & flagged code
7 flaggeddist/cli.jsView file
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/cli.js:
"claude-code": join(homedir(), ".claude", "skills"),
dir: join(homedir(), ".claude", "agents"),
dir: join(homedir(), ".claude", "agents"),
// `.claude/agents`)") -- this codebase already has independently
dir: join(homedir(), ".claude", "agents"),
dir: join(homedir(), ".claude", "agents"),
dir: join(homedir(), ".claude", "agents"),
dir: join(homedir(), ".claude", "agents"),
High
Credential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/cli.jsView on unpkg•Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior.
dist/cli.js:
// ../../node_modules/is-docker/index.js
"../../node_modules/is-docker/index.js"() {
// ../../node_modules/is-inside-container/index.js
"../../node_modules/is-inside-container/index.js"() {
// ../../node_modules/is-wsl/index.js
"../../node_modules/is-wsl/index.js"() {
// ../../node_modules/powershell-utils/index.js
"../../node_modules/powershell-utils/index.js"() {
High
Entrypoint Foreign Package Code Overwrite
Manifest-reachable source overwrites another installed package with package-defined remote behavior.
dist/cli.jsView on unpkgFindings
5 High5 Medium6 Low
HighCredential Redirect Persistencedist/cli.js
HighEntrypoint Foreign Package Code Overwritedist/cli.js
HighSandbox Evasion Gated Capabilitydist/cli.js
HighExternal Ai Agent Control Surface Mutationdist/cli.js
HighPrevious Version Dangerous Deltatemplates/skill-telemetry.sh
MediumDynamic Requiredist/cli.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helpertemplates/skill-telemetry.sh
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @skillsmith/cli@0.8.6.
See all versions of @skillsmith/cli for other recorded verdicts.
- Review the evidence and your use of @skillsmith/cli@0.8.6 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.