registry / rainskills / 0.1.46
rainskills@0.1.46
Agent Skills for deploying, troubleshooting, and verifying applications on Rainbond from Codex, Claude Code, and other AI coding agents
AI Security Review
scanned 17d ago · by lpm-firewall-aiSource inspection found no install lifecycle hook or concrete attack behavior. The flagged SSH, configuration migration, Windows helper, and network activity are consistent with explicit setup or local smoke testing.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
No automatic install trigger was found; the inspected operations run when their CLI command or smoke helper is invoked.
Impact
No unauthorized credential transfer, persistence, or other attack impact was established.
Mechanism
The CLI migration targets a legacy RainSkills configuration entry, SSH setup requires an interactive terminal for a selected host, and the smoke helper uses temporary local resources.
AI rationale
Source inspection found no install lifecycle hook or concrete attack behavior. The flagged SSH, configuration migration, Windows helper, and network activity are consistent with explicit setup or local smoke testing.
Decision evidence
public snapshotAI called this Clean at 95.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package manifest contains no automatic install lifecycle hook; its listed scripts are build, check, packaging, and test commands.
- The installer migration reads existing agent configuration and targets a legacy RainSkills server entry; it is part of the CLI installation plan.
- The launcher runs its main routine only when invoked as the program.
- The runtime smoke helper uses a temporary home and a loopback test server, then closes the server and removes the temporary files.
- SSH key setup requires an interactive terminal, identifies the selected host, and uses SSH for the requested setup.
- The bridge processes arguments supplied for a requested command, and the Windows helper restricts actions to a fixed list.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
8 flaggedinstall.shView file
2934patternName = generic_password
severity = medium
line = 2934
Medium
bin/rainskills.jsView file
5const os = require("node:os");
L6: const { spawn } = require("node:child_process");
L7: const { pathToFileURL } = require("node:url");
High
bin/read-snapshot.jsView file
3const SCOPES = new Set(["runtime", "app", "component", "delivery"]);
L4: const { classifyTool } = require("./tool-policy.js");
L5: const SENSITIVE_KEY = /(?:authorization|jwt|token|password|secret|credential|private[_-]?key|cookie|certificate|ssl)/i;
Findings
2 Critical3 High6 Medium4 Low
CriticalPersistence Backdoorrainbond-platform-installer/scripts/ssh-key-setup.js
CriticalPrevious Version Dangerous Deltabin/rainskills-tools.js
HighChild Processbin/rainskills.js
HighSame File Env Network Executionbin/runtime-smoke.js
HighSemantic Analysis Limitedrainbond-platform-installer/scripts/windows-platform.js#virtual:string-array:round1
MediumSecret Patterninstall.sh
MediumDynamic Requirebin/read-snapshot.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperrainbond-ai-assistant/scripts/validate_ai_engine_output.py
MediumStructural Risk Force Deep Review
LowScripts Present
Affected versions and remediation
This report applies to rainskills@0.1.46.
See all versions of rainskills for other recorded verdicts.
- Review the evidence and your use of rainskills@0.1.46 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.