registry / rainskills / 0.1.19
rainskills@0.1.19
Interactive Rainbond skill installer for Codex, Claude Code, and Pi Agent
AI Security Review
scanned 19d ago · by lpm-firewall-aiThe source supports a user-invoked platform installer and SSH setup flow, not the scanner's backdoor characterization. The manifest has no install lifecycle hook, and the reviewed configuration migration is limited to a matching legacy RainSkills entry.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
A user invokes the RainSkills CLI; platform installation also requires confirmation before proceeding.
Impact
No malicious impact was established from the inspected source.
Mechanism
The SSH helper installs a public key on the selected host and verifies access. The inspected installer paths do not establish covert persistence or an unconsented install-time action.
AI rationale
The source supports a user-invoked platform installer and SSH setup flow, not the scanner's backdoor characterization. The manifest has no install lifecycle hook, and the reviewed configuration migration is limited to a matching legacy RainSkills entry.
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes a CLI entrypoint and defines build, check, test, and prepack scripts; it has no npm install lifecycle hook.
- The SSH setup is reached through an explicit ssh prepare command and requires an interactive terminal.
- SSH setup sends the current user's public key to the selected host, then checks that key-based access works.
- The local CLI migration only removes a matching legacy RainSkills MCP configuration.
- Platform installation waits for confirmation before proceeding with the approved effects.
- Windows artifact downloads require HTTPS and redirects to approved origins.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggedinstall.shView file
2423patternName = generic_password
severity = medium
line = 2423
Medium
•path = install.sh
kind = build_helper
sizeBytes = 81160
magicHex = [redacted]
Medium
bin/rainskills.jsView file
2L3: const path = require("node:path");
L4: const crypto = require("node:crypto");
Medium
Dynamic Require
Package source references dynamic require/import behavior.
bin/rainskills.jsView on unpkg · L2Findings
2 Critical1 High6 Medium4 Low
CriticalPersistence Backdoorrainbond-platform-installer/scripts/ssh-key-setup.js
CriticalPrevious Version Dangerous Deltarainbond-platform-installer/scripts/platform-installer.js
HighSemantic Analysis Limitedrainbond-platform-installer/scripts/windows-platform.js#virtual:string-array:round1
MediumSecret Patterninstall.sh
MediumDynamic Requirebin/rainskills.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperinstall.sh
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to rainskills@0.1.19.
See all versions of rainskills for other recorded verdicts.
- Review the evidence and your use of rainskills@0.1.19 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.