registry / agentic-awesome-skills / 15.11.0

agentic-awesome-skills@15.11.0

AAS Core: complete local skill discovery, agent-owned selection, stack validation, and planning, backed by 2,005+ agentic skills.

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

Source shows no automatic lifecycle execution, credential exfiltration, or stealth persistence. The package nevertheless provides explicit, guarded AI-agent extension/configuration mutation and ships a user-code Playwright executor.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

Run the package bin installer or `aas mcp configure` command.

Impact

Can alter selected agent skill content or MCP configuration under user-selected paths.

Mechanism

Explicit agent-skill installation and approved host-config patching.

AI rationale

Evidence

package.jsontools/bin/install.jstools/lib/aas-v1/cli/main.jstools/lib/aas-v1/cache/update.jsskills/playwright-skill/run.js

Network endpoints2

github.com/sickn33/agentic-awesome-skills.gitregistry.npmjs.org

Decision evidence

public snapshot

AI called this Suspicious at 88.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

Explicit installer clones and copies skills into AI-agent skill directories.
Installer updates/removes entries it previously recorded in its manifest.
MCP configure can patch Codex/Claude config after digest approval.
playwright skill executes user-supplied automation code and can install Playwright.

Evidence against

package.json has no preinstall, install, or postinstall hook.
All mutation paths require an invoked CLI command.
Installer constrains clone URL/ref and guards destination paths/symlinks.
Registry update is pinned to https://registry.npmjs.org and verifies SRI.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

Source & flagged code

11 flagged

skills/developer-signup-flow/SKILL.mdView file

165patternName = stripe_test_secret severity = high line = 165 matchedText = sk[redacted]]

High

High Secret

Package contains a high-severity secret pattern.

skills/developer-signup-flow/SKILL.mdView on unpkg · L165

165patternName = stripe_test_secret severity = high line = 165 matchedText = sk[redacted]]

High

Secret Pattern

Stripe test secret key in skills/developer-signup-flow/SKILL.md

skills/developer-signup-flow/SKILL.mdView on unpkg · L165

tools/bin/aas.jsView file

3L4: const { main } = require("../lib/aas-v1/cli/main"); L5:

Medium

Dynamic Require

Package source references dynamic require/import behavior.

tools/bin/aas.jsView on unpkg · L3

tools/bin/install.jsView file

2Trigger-reachable persistence chain: manifest.bin -> tools/bin/install.js L2: L3: const { spawnSync } = require("child_process"); L4: const path = require("path"); ... L9: const { listSkillIdsRecursive, readSkill } = require("../lib/skill-utils"); L10: const packageMetadata = require("../../package.json"); L11: L12: const REPO = "https://github.com/sickn33/agentic-awesome-skills.git"; L13: const HOME = process.env.HOME || process.env.USERPROFILE || ""; L14: const INSTALL_MANIFEST_FILE = ".antigravity-install-manifest.json"; ... L19: const s = p.replace(/^~($|\/)/, HOME + "$1"); L20: const root = path.isAbsolute(s) ? path.parse(path.resolve(s)).root : process.cwd(); L21: const sanitizedSegments = path

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

tools/bin/install.jsView on unpkg · L2

2L3: const { spawnSync } = require("child_process"); L4: const path = require("path"); ... L9: const { listSkillIdsRecursive, readSkill } = require("../lib/skill-utils"); L10: const packageMetadata = require("../../package.json"); L11: L12: const REPO = "https://github.com/sickn33/agentic-awesome-skills.git"; L13: const HOME = process.env.HOME || process.env.USERPROFILE || ""; L14: const INSTALL_MANIFEST_FILE = ".antigravity-install-manifest.json"; ... L19: const s = p.replace(/^~($|\/)/, HOME + "$1"); L20: const root = path.isAbsolute(s) ? path.parse(path.resolve(s)).root : process.cwd(); L21: const sanitizedSegments = path

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

tools/bin/install.jsView on unpkg · L2

skills/huggingface-tool-builder/references/baseline_hf_api.tsxView file

39L40: const token = process.env.HF_TOKEN; L41: const headers: Record<string, string> = token ... L44: L45: const url = `https://huggingface.co/api/models?limit=${limit}`; L46: ... L54: L55: const text = await res.text(); L56: process.stdout.write(text); L57: })();

High

Credential Exfiltration

Source combines credential-like environment material and outbound requests; review data flow before blocking.

skills/huggingface-tool-builder/references/baseline_hf_api.tsxView on unpkg · L39

skills/gemini-deep-research/scripts/research.pyView file

•path = skills/gemini-deep-research/scripts/research.py kind = build_helper sizeBytes = 24204 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

skills/gemini-deep-research/scripts/research.pyView on unpkg

skills/web-artifacts-builder/scripts/shadcn-components.tar.gzView file

•path = skills/web-artifacts-builder/scripts/shadcn-components.tar.gz kind = compressed_blob sizeBytes = 19967 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

skills/web-artifacts-builder/scripts/shadcn-components.tar.gzView on unpkg

skills/theme-factory/theme-showcase.pdfView file

•path = skills/theme-factory/theme-showcase.pdf kind = high_entropy_blob sizeBytes = 124310 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

skills/theme-factory/theme-showcase.pdfView on unpkg

skills/fedora-hyprland-installer/tests/test-scripts.shView file

•path = skills/fedora-hyprland-installer/tests/test-scripts.sh kind = payload_in_excluded_dir sizeBytes = 1740 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

skills/fedora-hyprland-installer/tests/test-scripts.shView on unpkg

skills/playwright-skill/run.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = agentic-awesome-skills@14.6.0 matchedIdentity = npm:YWdlbnRpYy1hd2Vzb21lLXNraWxscw:14.6.0 similarity = 0.500 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

skills/playwright-skill/run.jsView on unpkg

Source & flagged code

11 flagged · loading source

skills/developer-signup-flow/SKILL.mdView file

165patternName = stripe_test_secret severity = high line = 165 matchedText = sk[redacted]]

High

High Secret

Package contains a high-severity secret pattern.

skills/developer-signup-flow/SKILL.mdView on unpkg · L165

165patternName = stripe_test_secret severity = high line = 165 matchedText = sk[redacted]]

High

Secret Pattern

Stripe test secret key in skills/developer-signup-flow/SKILL.md

skills/developer-signup-flow/SKILL.mdView on unpkg · L165

tools/bin/aas.jsView file

3L4: const { main } = require("../lib/aas-v1/cli/main"); L5:

Medium

Dynamic Require

Package source references dynamic require/import behavior.

tools/bin/aas.jsView on unpkg · L3

Findings

1 Critical6 High7 Medium5 Low

CriticalPrevious Version Dangerous Deltaskills/playwright-skill/run.js

HighHigh Secretskills/developer-signup-flow/SKILL.md

HighCredential Exfiltrationskills/huggingface-tool-builder/references/baseline_hf_api.tsx

HighTrigger Reachable Persistencetools/bin/install.js

HighShips High Entropy Blobskills/theme-factory/theme-showcase.pdf

HighPayload In Excluded Dirskills/fedora-hyprland-installer/tests/test-scripts.sh

HighSecret Patternskills/developer-signup-flow/SKILL.md

MediumDynamic Requiretools/bin/aas.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencetools/bin/install.js

Affected versions and remediation

This report applies to agentic-awesome-skills@15.11.0.

See all versions of agentic-awesome-skills for other recorded verdicts.

Review the evidence and your use of agentic-awesome-skills@15.11.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-08-09 23:15:24.645Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Runtime surface

Behavioral surface

Source & flagged code