registry / rainskills / 0.1.23
rainskills@0.1.23
Interactive Rainbond skill installer for Codex, Claude Code, and Pi Agent
AI Security Review
scanned 19d ago · by lpm-firewall-aiThe source shows no npm install hook or automatic attack behavior. The flagged remote access change requires an explicit SSH setup command and an interactive session with the selected server; platform installation separately requires confirmation.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
The user runs the SSH preparation command or starts platform installation.
Impact
The selected server accepts the user's SSH key for that account. The inspected source does not show this occurring during npm installation.
Mechanism
SSH preparation uses the user's public key on the selected server; platform installation pauses for confirmation before applying proposed effects.
AI rationale
The source shows no npm install hook or automatic attack behavior. The flagged remote access change requires an explicit SSH setup command and an interactive session with the selected server; platform installation separately requires confirmation.
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes a CLI and has no install lifecycle hook; its scripts are build, check, version, and test tasks.
- The CLI routes SSH preparation only when the user invokes `ssh prepare` or `ssh prepare-cluster`.
- SSH key setup requires an interactive terminal, names the selected server, and installs the user's public key there.
- Platform installation records proposed effects and waits for confirmation before starting.
- The local CLI migration removes only a legacy RainSkills MCP entry; its installer runs during CLI configuration.
Evidence against
- SSH setup appends a public key to the selected server's authorized_keys, creating persistent access for the user's account.
- The local CLI installer can update the user's Codex and Claude configuration files.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStrings
Source & flagged code
6 flaggedinstall.shView file
2394patternName = generic_password
severity = medium
line = 2394
Medium
•path = install.sh
kind = build_helper
sizeBytes = 81302
magicHex = [redacted]
Medium
bin/rainskills.jsView file
2L3: const path = require("node:path");
L4: const crypto = require("node:crypto");
Medium
Dynamic Require
Package source references dynamic require/import behavior.
bin/rainskills.jsView on unpkg · L2Findings
2 Critical1 High6 Medium4 Low
CriticalPersistence Backdoorrainbond-platform-installer/scripts/ssh-key-setup.js
CriticalPrevious Version Dangerous Deltarainbond-platform-installer/scripts/platform-installer.js
HighSemantic Analysis Limitedpackage.json
MediumSecret Patterninstall.sh
MediumDynamic Requirebin/rainskills.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperinstall.sh
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to rainskills@0.1.23.
See all versions of rainskills for other recorded verdicts.
- Review the evidence and your use of rainskills@0.1.23 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.