registry / agentic-awesome-skills / 16.8.0
agentic-awesome-skills@16.8.0
AAS Core: complete local skill discovery, agent-owned selection, stack validation, and planning, backed by 2,113+ agentic skills.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe manifest contains no preinstall, install, or postinstall hook. The high-severity scanner matches resolve to instructional material, isolated tests, service-specific examples, a normal PDF marker, and a bundled AJV schema rather than package-directed malicious behavior.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A user must run a bundled example or invoke the installer command.
Impact
No unconsented install-time execution, credential harvesting, or exfiltration was found.
Mechanism
Explicit API calls and selected-skill installation.
AI rationale
The manifest contains no preinstall, install, or postinstall hook. The high-severity scanner matches resolve to instructional material, isolated tests, service-specific examples, a normal PDF marker, and a bundled AJV schema rather than package-directed malicious behavior.
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest has ordinary bundled dependencies and no automatic install lifecycle hook.
- The flagged API examples use credentials only for the named service after explicit command execution.
- The shell finding is an isolated non-destructive test, and the signup file is instructional content.
- The PDF identifies itself as a ReportLab-generated document, while the AJV file is a schema definition.
Evidence against
- The package exposes a user-invoked installer that can copy selected skills into agent-specific directories.
- Some bundled skill examples make outbound requests when explicitly run.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
11 flagged · loading sourceskills/developer-signup-flow/SKILL.mdView file
165patternName = stripe_test_secret
severity = high
line = 165
High
High Secret
Package contains a high-severity secret pattern.
skills/developer-signup-flow/SKILL.mdView on unpkg · L165165patternName = stripe_test_secret
severity = high
line = 165
High
Secret Pattern
Stripe test secret key in skills/developer-signup-flow/SKILL.md
skills/developer-signup-flow/SKILL.mdView on unpkg · L165node_modules/ajv/dist/compile/jtd/serialize.jsView file
49sourceCode = `${gen.scopeRefs(names_1.default.scope)}return ${serializeFuncCode}`;
L50: const makeSerialize = new Function(`${names_1.default.scope}`, sourceCode);
L51: const serialize = makeSerialize(this.scope.get());
Low
Findings
1 Critical6 High6 Medium5 Low
CriticalHardcoded Runtime Data Exfiltrationskills/apify-content-analytics/reference/scripts/run_actor.js
HighHigh Secretskills/developer-signup-flow/SKILL.md
HighCredential Exfiltrationskills/huggingface-tool-builder/references/baseline_hf_api.tsx
HighShips High Entropy Blobskills/theme-factory/theme-showcase.pdf
HighPayload In Excluded Dirskills/fedora-hyprland-installer/tests/test-scripts.sh
HighSemantic Analysis Limitednode_modules/ajv/dist/refs/data.json
HighSecret Patternskills/developer-signup-flow/SKILL.md
MediumDynamic Requiretools/bin/aas.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperskills/gemini-deep-research/scripts/research.py
Affected versions and remediation
This report applies to agentic-awesome-skills@16.8.0.
See all versions of agentic-awesome-skills for other recorded verdicts.
- Review the evidence and your use of agentic-awesome-skills@16.8.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.