registry / agentic-awesome-skills / 15.10.0

agentic-awesome-skills@15.10.0

AAS Core: complete local skill discovery, agent-owned selection, stack validation, and planning, backed by 2,005+ agentic skills.

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

The package contains deliberate, guarded AI-agent extension setup and a user-invoked automation-code runner. These capabilities warrant a warning, but the inspected source does not establish malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs the package CLI, especially install or mcp configure with an approval digest.

Impact

Installed skills or MCP configuration can extend an AI-agent environment.

Mechanism

User-approved agent skill and MCP configuration setup.

AI rationale

Evidence

package.jsontools/bin/install.jstools/lib/aas-v1/cli/main.jstools/lib/aas-v1/cache/update.jsskills/playwright-skill/run.js

Network endpoints2

github.com/sickn33/agentic-awesome-skills.gitregistry.npmjs.org

Decision evidence

public snapshot

AI called this Suspicious at 88.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

tools/bin/install.js explicitly clones and installs skill trees into selected AI-agent skill directories.
tools/lib/aas-v1/cli/main.js can configure Codex/Claude MCP settings after a preview and matching approval digest.
skills/playwright-skill/run.js intentionally executes user-provided Playwright code and may install its declared dependency.

Evidence against

package.json has no preinstall, install, or postinstall lifecycle hook.
Installer activation requires an explicit CLI invocation; it validates paths, refs, selection, and symlinks.
MCP configuration requires a user-supplied approval digest and backs up existing configuration.
Registry updates are restricted to https://registry.npmjs.org and verify npm SRI.
No credential harvesting, exfiltration, stealth persistence, or unconsented install-time mutation was found.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork

Source & flagged code

11 flagged

skills/developer-signup-flow/SKILL.mdView file

165patternName = stripe_test_secret severity = high line = 165 matchedText = sk[redacted]]

High

High Secret

Package contains a high-severity secret pattern.

skills/developer-signup-flow/SKILL.mdView on unpkg · L165

165patternName = stripe_test_secret severity = high line = 165 matchedText = sk[redacted]]

High

Secret Pattern

Stripe test secret key in skills/developer-signup-flow/SKILL.md

skills/developer-signup-flow/SKILL.mdView on unpkg · L165

tools/bin/aas.jsView file

3L4: const { main } = require("../lib/aas-v1/cli/main"); L5:

Medium

Dynamic Require

Package source references dynamic require/import behavior.

tools/bin/aas.jsView on unpkg · L3

tools/bin/install.jsView file

2Trigger-reachable persistence chain: manifest.bin -> tools/bin/install.js L2: L3: const { spawnSync } = require("child_process"); L4: const path = require("path"); ... L9: const { listSkillIdsRecursive, readSkill } = require("../lib/skill-utils"); L10: const packageMetadata = require("../../package.json"); L11: L12: const REPO = "https://github.com/sickn33/agentic-awesome-skills.git"; L13: const HOME = process.env.HOME || process.env.USERPROFILE || ""; L14: const INSTALL_MANIFEST_FILE = ".antigravity-install-manifest.json"; ... L19: const s = p.replace(/^~($|\/)/, HOME + "$1"); L20: const root = path.isAbsolute(s) ? path.parse(path.resolve(s)).root : process.cwd(); L21: const sanitizedSegments = path

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

tools/bin/install.jsView on unpkg · L2

2L3: const { spawnSync } = require("child_process"); L4: const path = require("path"); ... L9: const { listSkillIdsRecursive, readSkill } = require("../lib/skill-utils"); L10: const packageMetadata = require("../../package.json"); L11: L12: const REPO = "https://github.com/sickn33/agentic-awesome-skills.git"; L13: const HOME = process.env.HOME || process.env.USERPROFILE || ""; L14: const INSTALL_MANIFEST_FILE = ".antigravity-install-manifest.json"; ... L19: const s = p.replace(/^~($|\/)/, HOME + "$1"); L20: const root = path.isAbsolute(s) ? path.parse(path.resolve(s)).root : process.cwd(); L21: const sanitizedSegments = path

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

tools/bin/install.jsView on unpkg · L2

skills/huggingface-tool-builder/references/baseline_hf_api.tsxView file

39L40: const token = process.env.HF_TOKEN; L41: const headers: Record<string, string> = token ... L44: L45: const url = `https://huggingface.co/api/models?limit=${limit}`; L46: ... L54: L55: const text = await res.text(); L56: process.stdout.write(text); L57: })();

High

Credential Exfiltration

Source combines credential-like environment material and outbound requests; review data flow before blocking.

skills/huggingface-tool-builder/references/baseline_hf_api.tsxView on unpkg · L39

skills/gemini-deep-research/scripts/research.pyView file

•path = skills/gemini-deep-research/scripts/research.py kind = build_helper sizeBytes = 24204 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

skills/gemini-deep-research/scripts/research.pyView on unpkg

skills/web-artifacts-builder/scripts/shadcn-components.tar.gzView file

•path = skills/web-artifacts-builder/scripts/shadcn-components.tar.gz kind = compressed_blob sizeBytes = 19967 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

skills/web-artifacts-builder/scripts/shadcn-components.tar.gzView on unpkg

skills/theme-factory/theme-showcase.pdfView file

•path = skills/theme-factory/theme-showcase.pdf kind = high_entropy_blob sizeBytes = 124310 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

skills/theme-factory/theme-showcase.pdfView on unpkg

skills/fedora-hyprland-installer/tests/test-scripts.shView file

•path = skills/fedora-hyprland-installer/tests/test-scripts.sh kind = payload_in_excluded_dir sizeBytes = 1740 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

skills/fedora-hyprland-installer/tests/test-scripts.shView on unpkg

skills/playwright-skill/run.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = agentic-awesome-skills@14.6.0 matchedIdentity = npm:YWdlbnRpYy1hd2Vzb21lLXNraWxscw:14.6.0 similarity = 0.500 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

skills/playwright-skill/run.jsView on unpkg

Source & flagged code

11 flagged · loading source

skills/developer-signup-flow/SKILL.mdView file

165patternName = stripe_test_secret severity = high line = 165 matchedText = sk[redacted]]

High

High Secret

Package contains a high-severity secret pattern.

skills/developer-signup-flow/SKILL.mdView on unpkg · L165

165patternName = stripe_test_secret severity = high line = 165 matchedText = sk[redacted]]

High

Secret Pattern

Stripe test secret key in skills/developer-signup-flow/SKILL.md

skills/developer-signup-flow/SKILL.mdView on unpkg · L165

tools/bin/aas.jsView file

3L4: const { main } = require("../lib/aas-v1/cli/main"); L5:

Medium

Dynamic Require

Package source references dynamic require/import behavior.

tools/bin/aas.jsView on unpkg · L3

Findings

1 Critical6 High7 Medium5 Low

CriticalPrevious Version Dangerous Deltaskills/playwright-skill/run.js

HighHigh Secretskills/developer-signup-flow/SKILL.md

HighCredential Exfiltrationskills/huggingface-tool-builder/references/baseline_hf_api.tsx

HighTrigger Reachable Persistencetools/bin/install.js

HighShips High Entropy Blobskills/theme-factory/theme-showcase.pdf

HighPayload In Excluded Dirskills/fedora-hyprland-installer/tests/test-scripts.sh

HighSecret Patternskills/developer-signup-flow/SKILL.md

MediumDynamic Requiretools/bin/aas.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencetools/bin/install.js

Affected versions and remediation

This report applies to agentic-awesome-skills@15.10.0.

See all versions of agentic-awesome-skills for other recorded verdicts.

Review the evidence and your use of agentic-awesome-skills@15.10.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-08-09 23:15:31.451Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Runtime surface

Behavioral surface

Source & flagged code