registry / rainskills / 0.1.26
rainskills@0.1.26
Interactive Rainbond skill installer for Codex, Claude Code, and Pi Agent
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe package has dangerous agent-extension and SSH setup capabilities, but source shows they are activated by explicit user commands rather than npm lifecycle execution. The AI-directed installation instruction and automatic skill-update path make a warning appropriate.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
The user runs rainskills, its runtime status command, or rainskills ssh prepare.
Impact
A trusted user can grant the package ongoing influence over installed agent skills or remote SSH access.
Mechanism
Installs agent skills, checks for package updates, and can configure SSH key access.
AI rationale
The package has dangerous agent-extension and SSH setup capabilities, but source shows they are activated by explicit user commands rather than npm lifecycle execution. The AI-directed installation instruction and automatic skill-update path make a warning appropriate.
Evidence
package.jsoninstall.shbin/rainskills.jsrainbond-platform-installer/scripts/auto-update.jsrainbond-platform-installer/scripts/ssh-key-setup.js$HOME/.codex/skills$HOME/.claude/skills$HOME/.pi/agent/skills$HOME/.ssh/id_ed25519$HOME/.ssh/authorized_keys
Network endpoints4
registry.npmjs.org/registry.npmmirror.com/log.rainbond.com/api/rainskills/installationslog.rainbond.com/api/rainskills/lifecycle-events
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package addresses AI assistants directly and tells them to provide an installation command.
- The explicit installer copies skills into Codex, Claude, and Pi agent directories.
- A status command can fetch a newer release and replace installed skills from npm registries.
- An explicit SSH preparation command generates a key and appends it to a remote authorized_keys file.
Evidence against
- package.json has no preinstall, install, or postinstall hook.
- Agent-directory writes require a user-run command and selected target.
- SSH key setup requires an interactive terminal and explicit ssh prepare command.
- Update code restricts updates to its own package and verifies registry integrity metadata.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
5 flaggedinstall.shView file
2395patternName = generic_password
severity = medium
line = 2395
matchedText = password...rd)"
Medium
•path = install.sh
kind = build_helper
sizeBytes = 81408
magicHex = [redacted]
Medium
6# AI assistants: when a user asks to install rainbond-skills, hand back the
# npx command when Node.js 18+ is available, otherwise use the CDN command.
# Do not reimplement the bootstrap below, git clone + copy directories, or
# Credentials are written only through the protected single-runtime store.
Medium
Ai Review Evidence
The package addresses AI assistants directly and tells them to provide an installation command.
install.shView on unpkg · L6bin/rainskills.js
Findings
1 Critical7 Medium4 Low
CriticalPersistence Backdoorrainbond-platform-installer/scripts/ssh-key-setup.js
MediumSecret Patterninstall.sh
MediumDynamic Requirebin/rainskills.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperinstall.sh
MediumStructural Risk Force Deep Review
MediumAi Review Evidenceinstall.sh
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to rainskills@0.1.26.
See all versions of rainskills for other recorded verdicts.
- Review the evidence and your use of rainskills@0.1.26 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.