happyskills@3.6.0
Package manager for AI agent skills
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe package sends runtime command telemetry to its own service, including persistent session and device identifiers, without an observed disclosure or opt-out. The event fields inspected contain usage metadata rather than credentials or file contents, so this warrants a warning rather than a block.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Automatically when a CLI command runs; eligible commands deliver buffered events at startup.
Impact
The vendor can associate CLI usage and command outcomes with persistent device and session identifiers. The inspected event excludes command arguments and working directory.
Mechanism
Records command and outcome metadata with session and device identifiers, stores events in a local NDJSON buffer, then posts them to the authenticated `/events` API endpoint.
AI rationale
The package sends runtime command telemetry to its own service, including persistent session and device identifiers, without an observed disclosure or opt-out. The event fields inspected contain usage metadata rather than credentials or file contents, so this warrants a warning rather than a block.
Evidence
src/index.jssrc/utils/command_telemetry.jssrc/utils/analytics.jssrc/utils/event_buffer.jssrc/constants.jsevents-buffer.ndjson
Network endpoints1
api.happyskills.ai/events
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- Every resolved CLI command starts command telemetry automatically, including command name, flags, positionals and working directory in the telemetry context.
- The emitted `cli.command` event sends command name, exit code, duration, CLI version, JSON mode and optional error code; no telemetry opt-out was found in the inspected source.
- Buffered events are delivered to the HappySkills API at `/events` with authentication; events include session and device identifiers.
Evidence against
- The transmitted command event fields are limited to usage and runtime metadata; the captured positionals, flags and working directory are written to local history rather than included in this event.
- The default telemetry destination is the package’s own `https://api.happyskills.ai` service, and delivery is buffered and best effort.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStrings
Source & flagged code
4 flaggedsrc/local_app/kernel.test.jsView file
8const http = require('node:http')
L9: const { spawn } = require('node:child_process')
L10: const { CLI_VERSION } = require('../constants')
High
Child Process
Package source references child process execution.
src/local_app/kernel.test.jsView on unpkg · L8src/commands/self-update.jsView file
35L36: const run_npm_install = () => catch_errors('npm install failed', async () => {
L37: const { spawn } = require('child_process')
L38: const stdio = is_json_mode() ? 'pipe' : 'inherit'
High
Runtime Package Install
Package source invokes a package manager install command at runtime.
src/commands/self-update.jsView on unpkg · L35package.jsonView file
Findings
1 Critical3 High3 Medium5 Low
CriticalPrevious Version Dangerous Deltasrc/commands/app.js
HighChild Processsrc/local_app/kernel.test.js
HighRuntime Package Installsrc/commands/self-update.js
HighSemantic Analysis Limitedpackage.json
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to happyskills@3.6.0.
See all versions of happyskills for other recorded verdicts.
- Review the evidence and your use of happyskills@3.6.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.