@viby/sdk@0.4.1
Framework-agnostic SDK for building persistent, skill-guided vibe coding products.
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe flagged credential flow is conditional on resolving a configured remote skill and is documented as authentication to the skills.sh API, with public GitHub as a fallback. The inspected source showed no unrelated credential collection, install-time contact, or other concrete attack behavior.
Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A generation resolves a configured remote skill and no saved skill snapshot exists.
Impact
The response supplies skill files for the requested generation; no unrelated collection or file modification was identified.
Mechanism
The SDK sends VERCEL_OIDC_TOKEN as a bearer token to skills.sh; if that lookup does not return a skill, it falls back to public GitHub retrieval.
AI rationale
The flagged credential flow is conditional on resolving a configured remote skill and is documented as authentication to the skills.sh API, with public GitHub as a fallback. The inspected source showed no unrelated credential collection, install-time contact, or other concrete attack behavior.
Network endpoints3
skills.shapi.github.comraw.githubusercontent.com
Decision evidence
public snapshotAI called this Clean at 88.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The SDK reads VERCEL_OIDC_TOKEN only while resolving a remote skill.
- The token is sent as a bearer token to the skills.sh API to retrieve that skill.
- Resolution occurs during generation when no resolved skill snapshot is already stored.
- The README documents this authentication behavior and identifies public GitHub as a fallback.
- The manifest has no install hook; its prepublishOnly script runs a release check.
Evidence against
- This is a documented integration for retrieving configured remote skills, not an unrelated collector.
- The token request is conditional on remote skill resolution; the source does not show broad environment collection or transmission of prompts or project files.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinified
Source & flagged code
6 flaggeddist/client.jsView file
653}
L654: async import(input) {
L655: if (!input || !input.source) {
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/client.jsView on unpkg · L653dist/integration-vercel.jsView file
2import { ConfigurationError } from "./errors.js";
L3: const DEFAULT_API_URL = "https://api.vercel.com";
L4: const DEFAULT_WEB_URL = "https://vercel.com";
...
L9: const textEncoder = new TextEncoder();
L10: const textDecoder = new TextDecoder(undefined, { fatal: true });
L11: export class VercelDeploymentError extends Error {
...
L46: },
L47: body: new URLSearchParams({ token: current.accessToken }),
L48: signal: context.signal,
Low
Weak Crypto
Package source references weak cryptographic algorithms.
dist/integration-vercel.jsView on unpkg · L2dist/skills.jsView file
Findings
1 Critical3 High4 Medium6 Low
CriticalPrevious Version Dangerous Deltadist/api-host.js
HighCredential Exfiltrationdist/skills.js
HighTrigger Reachable Credential Exfiltrationdist/skills.js
HighSemantic Analysis Limiteddist/deployment-preparation.js#virtual:normalized:round1
MediumDynamic Requiredist/client.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowWeak Cryptodist/integration-vercel.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @viby/sdk@0.4.1.
See all versions of @viby/sdk for other recorded verdicts.
- Review the evidence and your use of @viby/sdk@0.4.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.