registry / rainskills / 0.1.45
rainskills@0.1.45
Agent Skills for deploying, troubleshooting, and verifying applications on Rainbond from Codex, Claude Code, and other AI coding agents
AI Security Review
scanned 19d ago · by lpm-firewall-aiThe manifest has no install lifecycle hook, and the inspected flagged behaviors are scoped to user-invoked product workflows. Scanner labels do not establish malicious behavior in the source.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
A user invokes the RainSkills command or installer workflow.
Impact
No confirmed attack impact or attack surface was established.
Mechanism
The inspected code performs bounded CLI migration, interactive SSH setup, and allowlisted Windows installer actions; no covert collection or unconsented persistence was found.
AI rationale
The manifest has no install lifecycle hook, and the inspected flagged behaviors are scoped to user-invoked product workflows. Scanner labels do not establish malicious behavior in the source.
Decision evidence
public snapshotAI called this Clean at 92.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes a command-line entry point and contains no install lifecycle hook.
- The local installer removes only matching legacy RainSkills server entries from user configuration and preserves other entries.
- SSH key setup requires an interactive terminal before installing the user’s key on a specified server.
- The Windows helper accepts only fixed actions and validates operation identifiers before invoking its platform workflow.
- The tools bridge builds its upload-helper environment from the configured Rainbond URL.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggedinstall.shView file
2934patternName = generic_password
severity = medium
line = 2934
Medium
bin/rainskills.jsView file
2L3: const path = require("node:path");
L4: const crypto = require("node:crypto");
Medium
Dynamic Require
Package source references dynamic require/import behavior.
bin/rainskills.jsView on unpkg · L2rainbond-platform-installer/scripts/ssh-key-setup.jsView file
6const path = require("node:path");
L7: const { spawn, spawnSync } = require("node:child_process");
L8: const { createSecureStateStore } = require("./secure-state.js");
...
L11:
L12: const REMOTE_AUTHORIZED_KEYS_SCRIPT = [
L13: "set -eu",
...
L65:
L66: function assertSafeIdentityFile(filePath, { privateKey = false, platform = process.platform } = {}) {
L67: const info = fs.lstatSync(filePath);
...
L77: function ensureDefaultIdentity({
L78: home = os.homedir(),
L79: platform = process.platform,
Findings
2 Critical1 High6 Medium4 Low
CriticalPersistence Backdoorrainbond-platform-installer/scripts/ssh-key-setup.js
CriticalPrevious Version Dangerous Deltabin/rainskills-tools.js
HighSemantic Analysis Limitedrainbond-platform-installer/scripts/windows-platform.js#virtual:string-array:round1
MediumSecret Patterninstall.sh
MediumDynamic Requirebin/rainskills.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperrainbond-ai-assistant/scripts/validate_ai_engine_output.py
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to rainskills@0.1.45.
See all versions of rainskills for other recorded verdicts.
- Review the evidence and your use of rainskills@0.1.45 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.