registry / rainskills / 0.1.20
rainskills@0.1.20
Interactive Rainbond skill installer for Codex, Claude Code, and Pi Agent
AI Security Review
scanned 19d ago · by lpm-firewall-aiThe flagged SSH persistence behavior is an explicit, interactive public-key setup, and the agent configuration change is narrowly limited to this package’s legacy entry. The inspected source supports normal installer behavior, not a malicious attack.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
A user runs the RainSkills CLI or installer and selects the relevant setup action.
Impact
No unauthorized access or other harmful effect was established from the inspected source.
Mechanism
Setup removes only a matching legacy RainSkills MCP entry; SSH preparation adds a public key to the user-selected remote account. Lifecycle events are reported to Rainbond’s endpoint.
AI rationale
The flagged SSH persistence behavior is an explicit, interactive public-key setup, and the agent configuration change is narrowly limited to this package’s legacy entry. The inspected source supports normal installer behavior, not a malicious attack.
Evidence
package.jsonscripts/install-local-cli.mjsinstall.shbin/rainskills.jsrainbond-platform-installer/scripts/ssh-key-setup.jsrainbond-platform-installer/scripts/platform-installer.jsrainbond-platform-installer/scripts/telemetry.js
Network endpoints1
log.rainbond.com/api/rainskills/lifecycle-events
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes a CLI and lists build, check, version, and test scripts; no npm install lifecycle hook is defined.
- The local CLI migration targets only the existing RainSkills `rainbond` MCP entry and removes it only when it matches the old `npx rainskills … mcp serve` form; the installer invokes this migration during setup.
- SSH key preparation is an explicit CLI command, requires an interactive terminal, and adds the selected public key to the specified account’s authorized keys.
- The platform installer records proposed effects and waits for confirmation before proceeding.
- Lifecycle reports use Rainbond’s `log.rainbond.com` endpoint and contain structured installation event data.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggedinstall.shView file
2394patternName = generic_password
severity = medium
line = 2394
Medium
•path = install.sh
kind = build_helper
sizeBytes = 81253
magicHex = [redacted]
Medium
bin/rainskills.jsView file
2L3: const path = require("node:path");
L4: const crypto = require("node:crypto");
Medium
Dynamic Require
Package source references dynamic require/import behavior.
bin/rainskills.jsView on unpkg · L2Findings
2 Critical1 High6 Medium4 Low
CriticalPersistence Backdoorrainbond-platform-installer/scripts/ssh-key-setup.js
CriticalPrevious Version Dangerous Deltarainbond-platform-installer/scripts/platform-installer.js
HighSemantic Analysis Limitedpackage.json
MediumSecret Patterninstall.sh
MediumDynamic Requirebin/rainskills.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperinstall.sh
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to rainskills@0.1.20.
See all versions of rainskills for other recorded verdicts.
- Review the evidence and your use of rainskills@0.1.20 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.