registry / AI-agent capability abuse / agentic-awesome-skills / 15.16.0

agentic-awesome-skills@15.16.0

AAS Core: complete local skill discovery, agent-owned selection, stack validation, and planning, backed by 2,025+ agentic skills.

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

Source shows an explicit agent-skill installer, not an npm lifecycle payload or covert data-exfiltration chain. Its broad default agent-directory write and mutable-tag option warrant a warning under the supplied policy.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs the agentic-awesome-skills executable.

Impact

Installed skill content may affect later AI-agent behavior.

Mechanism

Explicit CLI skill installation into agent directories

AI rationale

Evidence

package.jsontools/bin/install.jsskills/huggingface-tool-builder/references/baseline_hf_api.tsx~/.agents/skills~/.codex/skills~/.cursor/skills~/.claude/skills~/.gemini/skills

Network endpoints2

github.com/sickn33/agentic-awesome-skills.gitregistry.npmjs.org

Decision evidence

public snapshot

AI called this Suspicious at 87.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

Explicit installer clones a remote skills repository and writes selected skills into agent directories.
Default target is ~/.agents/skills; flags support ~/.codex/skills and other agent skill directories.
A user can bypass pinned-release verification with the explicit --tag option.

Evidence against

package.json has no preinstall, install, or postinstall lifecycle hook.
Writes occur only when the user invokes the installer binary; no import-time execution was found.
Release installs query npm metadata and compare the cloned Git HEAD before copying files.
Credential/network hint is an opt-in example that sends HF_TOKEN only to huggingface.co.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Source & flagged code

9 flagged

skills/developer-signup-flow/SKILL.mdView file

165patternName = stripe_test_secret severity = high line = 165 matchedText = sk[redacted]]

High

High Secret

Package contains a high-severity secret pattern.

skills/developer-signup-flow/SKILL.mdView on unpkg · L165

165patternName = stripe_test_secret severity = high line = 165 matchedText = sk[redacted]]

High

Secret Pattern

Stripe test secret key in skills/developer-signup-flow/SKILL.md

skills/developer-signup-flow/SKILL.mdView on unpkg · L165

tools/bin/aas.jsView file

3L4: const { main } = require("../lib/aas-v1/cli/main"); L5:

Medium

Dynamic Require

Package source references dynamic require/import behavior.

tools/bin/aas.jsView on unpkg · L3

skills/huggingface-tool-builder/references/baseline_hf_api.tsxView file

39L40: const token = process.env.HF_TOKEN; L41: const headers: Record<string, string> = token ... L44: L45: const url = `https://huggingface.co/api/models?limit=${limit}`; L46: ... L54: L55: const text = await res.text(); L56: process.stdout.write(text); L57: })();

High

Credential Exfiltration

Source combines credential-like environment material and outbound requests; review data flow before blocking.

skills/huggingface-tool-builder/references/baseline_hf_api.tsxView on unpkg · L39

skills/gemini-deep-research/scripts/research.pyView file

•path = skills/gemini-deep-research/scripts/research.py kind = build_helper sizeBytes = 24204 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

skills/gemini-deep-research/scripts/research.pyView on unpkg

skills/web-artifacts-builder/scripts/shadcn-components.tar.gzView file

•path = skills/web-artifacts-builder/scripts/shadcn-components.tar.gz kind = compressed_blob sizeBytes = 19967 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

skills/web-artifacts-builder/scripts/shadcn-components.tar.gzView on unpkg

skills/theme-factory/theme-showcase.pdfView file

•path = skills/theme-factory/theme-showcase.pdf kind = high_entropy_blob sizeBytes = 124310 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

skills/theme-factory/theme-showcase.pdfView on unpkg

skills/fedora-hyprland-installer/tests/test-scripts.shView file

•path = skills/fedora-hyprland-installer/tests/test-scripts.sh kind = payload_in_excluded_dir sizeBytes = 1740 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

skills/fedora-hyprland-installer/tests/test-scripts.shView on unpkg

tools/bin/install.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = agentic-awesome-skills@15.12.0 matchedIdentity = npm:YWdlbnRpYy1hd2Vzb21lLXNraWxscw:15.12.0 similarity = 0.983 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

tools/bin/install.jsView on unpkg

Source & flagged code

9 flagged · loading source

skills/developer-signup-flow/SKILL.mdView file

165patternName = stripe_test_secret severity = high line = 165 matchedText = sk[redacted]]

High

High Secret

Package contains a high-severity secret pattern.

skills/developer-signup-flow/SKILL.mdView on unpkg · L165

165patternName = stripe_test_secret severity = high line = 165 matchedText = sk[redacted]]

High

Secret Pattern

Stripe test secret key in skills/developer-signup-flow/SKILL.md

skills/developer-signup-flow/SKILL.mdView on unpkg · L165

tools/bin/aas.jsView file

3L4: const { main } = require("../lib/aas-v1/cli/main"); L5:

Medium

Dynamic Require

Package source references dynamic require/import behavior.

tools/bin/aas.jsView on unpkg · L3

Findings

1 Critical5 High6 Medium5 Low

CriticalPrevious Version Dangerous Deltatools/bin/install.js

HighHigh Secretskills/developer-signup-flow/SKILL.md

HighCredential Exfiltrationskills/huggingface-tool-builder/references/baseline_hf_api.tsx

HighShips High Entropy Blobskills/theme-factory/theme-showcase.pdf

HighPayload In Excluded Dirskills/fedora-hyprland-installer/tests/test-scripts.sh

HighSecret Patternskills/developer-signup-flow/SKILL.md

MediumDynamic Requiretools/bin/aas.js

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperskills/gemini-deep-research/scripts/research.py

MediumShips Compressed Blobskills/web-artifacts-builder/scripts/shadcn-components.tar.gz

Affected versions and remediation

This report applies to agentic-awesome-skills@15.16.0.

See all versions of agentic-awesome-skills for other recorded verdicts.

Review the evidence and your use of agentic-awesome-skills@15.16.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-08-21 04:27:46.950Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Runtime surface

Behavioral surface

Source & flagged code