@viby/sdk@0.3.17
Framework-agnostic SDK for building persistent, skill-guided vibe coding products.
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe flagged token flow is conditional on remote skill resolution during generation and is documented as authentication to the skills.sh API. GitHub credentials go to GitHub for repository lookups, and the package has no install-time hook.
Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A generation resolves configured remote skill references that are not already stored.
Impact
No malicious impact identified in the reviewed flows.
Mechanism
The resolver authenticates to skills.sh with Vercel OIDC when available, then falls back to public GitHub; a configured GitHub token is used for GitHub API lookups.
AI rationale
The flagged token flow is conditional on remote skill resolution during generation and is documented as authentication to the skills.sh API. GitHub credentials go to GitHub for repository lookups, and the package has no install-time hook.
Network endpoints3
skills.shapi.github.comraw.githubusercontent.com
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The README describes remote skills.sh resolution through its authenticated API when Vercel OIDC is available, with public GitHub as a fallback.
- The Vercel OIDC token is read only in the remote skill resolver and sent as a bearer token to skills.sh for that lookup.
- The resolver is called while processing a generation whose skills have not already been resolved.
- GitHub tokens, when configured, are sent to api.github.com for GitHub repository lookups.
Evidence against
- Remote skill resolution forwards VERCEL_OIDC_TOKEN to skills.sh; this is a cross-service credential flow, but the package documents it as authentication for that feature.
- The manifest has prepack and prepublishOnly scripts, but no install-time lifecycle hook.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
5 flaggeddist/integration-vercel.jsView file
2import { ConfigurationError } from "./errors.js";
L3: const DEFAULT_API_URL = "https://api.vercel.com";
L4: const DEFAULT_WEB_URL = "https://vercel.com";
...
L9: const textEncoder = new TextEncoder();
L10: const textDecoder = new TextDecoder(undefined, { fatal: true });
L11: export class VercelDeploymentError extends Error {
...
L46: },
L47: body: new URLSearchParams({ token: current.accessToken }),
L48: signal: context.signal,
Low
Weak Crypto
Package source references weak cryptographic algorithms.
dist/integration-vercel.jsView on unpkg · L2dist/skills.jsView file
13backend: ["backend", "api", "server", "authentication", "session", "webhook"],
L14: data: ["database", "schema", "query", "postgres", "migration", "storage"],
L15: ai: ["ai", "agent", "model", "llm", "prompt", "embedding", "generation"],
...
L32: #cache = new Map();
L33: constructor(groups = {}, rootDirectory = process.cwd(), resolvers = []) {
L34: this.#groups = groups;
...
L69: for (const resolver of this.#resolvers) {
L70: const output = await resolver.resolve({ reference, category, prompt });
L71: if (output)
...
L235: async function resolveRemoteSkill(id) {
L236: const oidcToken = process.env.VERCEL_OIDC_TOKEN;
L237: if (oidcToken) {
High
Credential Exfiltration
Findings
1 Critical3 High3 Medium6 Low
CriticalPrevious Version Dangerous Deltadist/api-host.js
HighCredential Exfiltrationdist/skills.js
HighTrigger Reachable Credential Exfiltrationdist/skills.js
HighSemantic Analysis Limiteddist/deployment-preparation.js#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowWeak Cryptodist/integration-vercel.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @viby/sdk@0.3.17.
See all versions of @viby/sdk for other recorded verdicts.
- Review the evidence and your use of @viby/sdk@0.3.17 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.