registry / rainskills / 0.1.21
rainskills@0.1.21
Interactive Rainbond skill installer for Codex, Claude Code, and Pi Agent
AI Security Review
scanned 19d ago · by lpm-firewall-aiSource inspection found no install lifecycle hook or concrete attack behavior. The scanner’s SSH persistence finding corresponds to an explicit, interactive setup flow, and the agent configuration migration is limited to a matching legacy RainSkills entry.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
The user runs the separate SSH prepare command in an interactive system terminal.
Impact
This enables key-based login to that server; inspected source does not show an unrelated credential transfer or covert remote-access setup.
Mechanism
The helper sends the locally generated public key through SSH and adds it to the selected server’s authorized_keys file.
AI rationale
Source inspection found no install lifecycle hook or concrete attack behavior. The scanner’s SSH persistence finding corresponds to an explicit, interactive setup flow, and the agent configuration migration is limited to a matching legacy RainSkills entry.
Decision evidence
public snapshotAI called this Clean at 95.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes a CLI and build/check scripts; the inspected manifest has no npm install lifecycle hook.
- The local installer removes only a matching legacy RainSkills MCP entry from the named Rainbond configuration section.
- SSH setup requires an interactive terminal, uses a locally generated public key, and adds it to the user-selected server’s authorized_keys.
- When SSH authentication is unavailable, the platform installer asks the user to run a separate SSH preparation command in their system terminal.
- The platform installer waits for confirmation of displayed effects before beginning installation.
Evidence against
- The SSH helper writes a public key to remote authorized_keys, which enables key-based access; source ties this to the explicit preparation flow for the selected host.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
Source & flagged code
6 flaggedinstall.shView file
2394patternName = generic_password
severity = medium
line = 2394
Medium
•path = install.sh
kind = build_helper
sizeBytes = 81253
magicHex = [redacted]
Medium
bin/rainskills.jsView file
2L3: const path = require("node:path");
L4: const crypto = require("node:crypto");
Medium
Dynamic Require
Package source references dynamic require/import behavior.
bin/rainskills.jsView on unpkg · L2Findings
2 Critical1 High6 Medium4 Low
CriticalPersistence Backdoorrainbond-platform-installer/scripts/ssh-key-setup.js
CriticalPrevious Version Dangerous Deltarainbond-platform-installer/scripts/platform-installer.js
HighSemantic Analysis Limitedpackage.json
MediumSecret Patterninstall.sh
MediumDynamic Requirebin/rainskills.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperinstall.sh
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to rainskills@0.1.21.
See all versions of rainskills for other recorded verdicts.
- Review the evidence and your use of rainskills@0.1.21 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.