registry / rainskills / 0.1.36
rainskills@0.1.36
Interactive Rainbond skill installer for Codex, Claude Code, Pi Agent, DeepSeek Harness, WorkBuddy, and Hermes Agent
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe package has no install lifecycle hook, self-dependency, or confirmed covert execution path. Its sensitive SSH behavior is an interactive, explicitly routed setup command rather than automatic persistence.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
A user explicitly runs a platform, SSH, or tools command.
Impact
The selected remote host may receive the user's generated SSH public key during explicit setup.
Mechanism
User-invoked platform administration and authenticated API access.
AI rationale
The package has no install lifecycle hook, self-dependency, or confirmed covert execution path. Its sensitive SSH behavior is an interactive, explicitly routed setup command rather than automatic persistence.
Decision evidence
public snapshotAI called this Clean at 92.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes a command-line binary and contains no automatic install lifecycle hook.
- The SSH key operation is reachable only through the explicit ssh prepare command and requires an interactive terminal.
- The tool bridge uses configured Rainbond credentials and rejects unsafe endpoint URLs by default.
Evidence against
- The explicit platform installer can generate an SSH key and append its public key to a selected remote host.
- The command-line tool can make authenticated requests to a user-configured Rainbond service.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggedinstall.shView file
2855patternName = generic_password
severity = medium
line = 2855
Medium
•path = install.sh
kind = build_helper
sizeBytes = 98041
magicHex = [redacted]
Medium
bin/rainskills.jsView file
2L3: const path = require("node:path");
L4: const crypto = require("node:crypto");
Medium
Dynamic Require
Package source references dynamic require/import behavior.
bin/rainskills.jsView on unpkg · L2Findings
2 Critical1 High6 Medium4 Low
CriticalPersistence Backdoorrainbond-platform-installer/scripts/ssh-key-setup.js
CriticalPrevious Version Dangerous Deltabin/rainskills-tools.js
HighSemantic Analysis Limitedpackage.json
MediumSecret Patterninstall.sh
MediumDynamic Requirebin/rainskills.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperinstall.sh
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to rainskills@0.1.36.
See all versions of rainskills for other recorded verdicts.
- Review the evidence and your use of rainskills@0.1.36 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.