registry / rainskills / 0.1.48
rainskills@0.1.48
Agent Skills for deploying, troubleshooting, and verifying applications on Rainbond from Codex, Claude Code, and other AI coding agents
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe flagged process execution and SSH key modification serve the package's Rainbond installation purpose and are behind explicit user commands. The reviewed telemetry is limited to installation outcome metadata, is sent to Rainbond endpoints, and has a documented opt-out.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Installer and SSH setup actions run when a user invokes the corresponding CLI command; SSH setup requires an interactive terminal.
Impact
Expected installation and server-setup effects; no unauthorized credential theft, hidden persistence, or unrelated execution was identified.
Mechanism
The installer configures selected agent integrations and can add a public key to a user-selected server. It reports installation outcome metadata to Rainbond logging endpoints, with a documented telemetry opt-out.
AI rationale
The flagged process execution and SSH key modification serve the package's Rainbond installation purpose and are behind explicit user commands. The reviewed telemetry is limited to installation outcome metadata, is sent to Rainbond endpoints, and has a documented opt-out.
Evidence
~/.ssh/id_ed25519~/.ssh/id_ed25519.pub~/.ssh/authorized_keys${HOME}/.rainbond/rainskills/telemetry/events.jsonl
Network endpoints3
log.rainbond.com/api/rainskills/installationslog.rainbond.com/api/rainskills/lifecycle-eventslog.rainbond.com/api/rainskills/events
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package exposes an explicit CLI, and its manifest declares no npm install lifecycle hook.
- SSH key setup is routed through an explicit `ssh prepare` command and requires an interactive terminal.
- The SSH helper adds a public key to the selected server's authorized_keys as part of that setup flow.
- Installer telemetry is described as anonymous, can be disabled with `--no-telemetry`, and reports installation outcome metadata to Rainbond endpoints.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
7 flaggedinstall.shView file
2934patternName = generic_password
severity = medium
line = 2934
Medium
bin/rainskills.jsView file
5const os = require("node:os");
L6: const { spawn } = require("node:child_process");
L7: const { pathToFileURL } = require("node:url");
High
bin/read-snapshot.jsView file
3const SCOPES = new Set(["runtime", "app", "component", "delivery"]);
L4: const { classifyTool } = require("./tool-policy.js");
L5: const SENSITIVE_KEY = /(?:authorization|jwt|token|password|secret|credential|private[_-]?key|cookie|certificate|ssl)/i;
Findings
1 Critical3 High6 Medium4 Low
CriticalPersistence Backdoorrainbond-platform-installer/scripts/ssh-key-setup.js
HighChild Processbin/rainskills.js
HighSame File Env Network Executionbin/runtime-smoke.js
HighSemantic Analysis Limitedrainbond-platform-installer/scripts/windows-platform.js#virtual:string-array:round1
MediumSecret Patterninstall.sh
MediumDynamic Requirebin/read-snapshot.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperrainbond-ai-assistant/scripts/validate_ai_engine_output.py
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
Low
Affected versions and remediation
This report applies to rainskills@0.1.48.
See all versions of rainskills for other recorded verdicts.
- Review the evidence and your use of rainskills@0.1.48 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.