registry / happyskills / 1.16.1
happyskills@1.16.1
Package manager for AI agent skills
AI Security Review
scanned 4mo ago · by lpm-firewall-aiStatic inspection found no lifecycle execution, hidden payload, credential harvesting, or unsolicited AI-agent control-surface mutation. The suspicious primitives are expected for a user-invoked skill package manager and are constrained to documented CLI workflows.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
User runs happyskills CLI commands such as install, login, search, feedback, or self-update.
Impact
Installs or manages user-selected skills and credentials; no unconsented install-time/import-time exfiltration or control-surface mutation found.
Mechanism
Package-aligned CLI registry operations and local skill installation
AI rationale
Static inspection found no lifecycle execution, hidden payload, credential harvesting, or unsolicited AI-agent control-surface mutation. The suspicious primitives are expected for a user-invoked skill package manager and are constrained to documented CLI workflows.
Evidence
package.jsonbin/happyskills.jssrc/index.jssrc/constants.jssrc/api/client.jssrc/commands/self-update.jssrc/engine/installer.jssrc/agents/linker.jssrc/auth/token_store.jssrc/utils/scrub_secrets.test.js~/.config/happyskills/credentials.json~/.config/happyskills/skill-update-check.json.agents/skills/skills-lock.json.claude/skills.cursor/skills.windsurf/skills.codex/skills.github/skills.aider/skills.cline/skills.roo/skills
Network endpoints2
api.happyskills.airegistry.npmjs.org/happyskills/latest
Decision evidence
public snapshotAI called this Clean at 93.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
Evidence against
- package.json has no install/preinstall/postinstall lifecycle scripts; bin is explicit CLI at bin/happyskills.js.
- src/index.js only dispatches whitelisted commands from constants.js, then requires ./commands/<resolved>.
- src/commands/self-update.js runs npm install -g happyskills@latest only when user invokes self-update.
- src/api/client.js sends requests to https://api.happyskills.ai or env override for registry operations.
- src/engine/installer.js downloads skills, writes .agents/skills and skills-lock.json, and links configured agent skill dirs as package-aligned install behavior.
- src/utils/scrub_secrets.test.js contains synthetic token patterns used to test redaction, not real embedded secrets.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggedsrc/utils/scrub_secrets.test.jsView file
16patternName = aws_access_key
severity = critical
line = 16
matchedText = assert.e...}.`)
Critical
Critical Secret
Package contains a critical-looking secret pattern.
src/utils/scrub_secrets.test.jsView on unpkg · L1616patternName = aws_access_key
severity = critical
line = 16
matchedText = assert.e...}.`)
Critical
Secret Pattern
AWS access key ID in src/utils/scrub_secrets.test.js
src/utils/scrub_secrets.test.jsView on unpkg · L16src/integration/drift.test.jsView file
27const assert = require('node:assert/strict')
L28: const { spawnSync } = require('child_process')
L29: const fs = require('fs')
High
Child Process
Package source references child process execution.
Findings
3 Critical3 High3 Medium5 Low
CriticalCritical Secretsrc/utils/scrub_secrets.test.js
CriticalPrevious Version Dangerous Deltasrc/utils/skill_update_check.test.js
CriticalSecret Patternsrc/utils/scrub_secrets.test.js
HighChild Processsrc/integration/drift.test.js
HighSame File Env Network Executionsrc/integration/api_envelope.test.js
HighRuntime Package Installsrc/commands/self-update.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to happyskills@1.16.1.
See all versions of happyskills for other recorded verdicts.
- Review the evidence and your use of happyskills@1.16.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.