happyskills@3.0.0
Package manager for AI agent skills
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe package performs undisclosed runtime telemetry: it records command usage and sends buffered events to its own API, with persistent correlation IDs. The data is limited to command metadata and the endpoint is first-party, so this warrants a warning rather than a malicious verdict.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Running the CLI; events are buffered at command completion and may be sent when a later command starts.
Impact
The vendor can associate command usage and outcomes with persistent device and session identifiers; the README gives no telemetry disclosure or opt-out.
Mechanism
Records command names and outcome metadata, stamps events with correlation IDs, then posts buffered events to `/events` using the package API client.
AI rationale
The package performs undisclosed runtime telemetry: it records command usage and sends buffered events to its own API, with persistent correlation IDs. The data is limited to command metadata and the endpoint is first-party, so this warrants a warning rather than a malicious verdict.
Evidence
src/index.jssrc/utils/command_telemetry.jssrc/utils/analytics.jssrc/constants.jsREADME.mdevents-buffer.ndjsondevice.jsonsession.json
Network endpoints1
api.happyskills.ai
Decision evidence
public snapshotAI called this Suspicious at 90.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The CLI records a `cli.command` event on command completion by default.
- Each event includes the command name, exit code, duration, CLI version, JSON mode, and sometimes an error code.
- Buffered events are sent to the package’s API at `/events` with authentication when a later command runs.
- The README lists commands and installation but does not disclose telemetry or provide an opt-out.
Evidence against
- The telemetry targets the package’s own API, or the user-configured `HAPPYSKILLS_API_URL`.
- The command event fields do not include command arguments, file contents, hostnames, or usernames.
- Events are buffered locally and delivery is opportunistic; the source describes random device and session identifiers.
- The `npm install` subprocess is used only by the explicit `self-update` command.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
Source & flagged code
5 flaggedsrc/integration/drift.test.jsView file
31const assert = require('node:assert/strict')
L32: const { spawnSync } = require('child_process')
L33: const fs = require('fs')
High
Child Process
Package source references child process execution.
src/integration/drift.test.jsView on unpkg · L31bin/happyskills.jsView file
2L3: try { require('dotenv').config({ path: require('path').join(__dirname, '..', '.env'), quiet: true }) } catch {}
L4: const { run } = require('../src/index')
Medium
Dynamic Require
Package source references dynamic require/import behavior.
bin/happyskills.jsView on unpkg · L2src/commands/self-update.jsView file
35
Findings
1 Critical3 High4 Medium5 Low
CriticalPrevious Version Dangerous Deltasrc/integration/api_envelope.test.js
HighChild Processsrc/integration/drift.test.js
HighRuntime Package Installsrc/commands/self-update.js
HighSemantic Analysis Limitedpackage.json
MediumDynamic Requirebin/happyskills.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to happyskills@3.0.0.
See all versions of happyskills for other recorded verdicts.
- Review the evidence and your use of happyskills@3.0.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.