registry / rainskills / 0.1.50
rainskills@0.1.50
Agent Skills for deploying, troubleshooting, and verifying applications on Rainbond from Codex, Claude Code, and other AI coding agents
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe flagged SSH persistence behavior is a user-invoked setup for passwordless access to a specified server, with interactive safeguards. No install hook is declared, and the reviewed telemetry is documented and excludes credentials and raw command output.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A user invokes the SSH preparation or runtime connection command; telemetry is sent during relevant operations unless disabled.
Impact
No unauthorized access or data theft was identified in the reviewed paths.
Mechanism
SSH setup installs the user's public key on the specified host. Telemetry posts status and platform fields to the documented Rainbond endpoint.
AI rationale
The flagged SSH persistence behavior is a user-invoked setup for passwordless access to a specified server, with interactive safeguards. No install hook is declared, and the reviewed telemetry is documented and excludes credentials and raw command output.
Evidence
~/.ssh/authorized_keys~/.rainbond/rainskills/telemetry/
Network endpoints1
log.rainbond.com
Decision evidence
public snapshotAI called this Clean at 92.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package manifest defines a CLI and contains no install lifecycle hook.
- SSH key setup requires an interactive terminal and explains that OpenSSH may prompt the user before installing a key for the specified host.
- The SSH helper adds the supplied public key to the remote user's authorized_keys file, matching its documented purpose of preparing a user-requested SSH connection.
- Telemetry events contain operational status and platform fields; the package documents the report host and says events exclude tokens, passwords, full addresses, and raw command output.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
7 flaggedinstall.shView file
2934patternName = generic_password
severity = medium
line = 2934
Medium
bin/rainskills.jsView file
5const os = require("node:os");
L6: const { spawn } = require("node:child_process");
L7: const { pathToFileURL } = require("node:url");
High
bin/read-snapshot.jsView file
3const SCOPES = new Set(["runtime", "app", "component", "delivery"]);
L4: const { classifyTool } = require("./tool-policy.js");
L5: const SENSITIVE_KEY = /(?:authorization|jwt|token|password|secret|credential|private[_-]?key|cookie|certificate|ssl)/i;
Findings
1 Critical3 High6 Medium4 Low
CriticalPersistence Backdoorrainbond-platform-installer/scripts/ssh-key-setup.js
HighChild Processbin/rainskills.js
HighSame File Env Network Executionbin/runtime-smoke.js
HighSemantic Analysis Limitedrainbond-platform-installer/scripts/windows-platform.js#virtual:string-array:round1
MediumSecret Patterninstall.sh
MediumDynamic Requirebin/read-snapshot.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperrainbond-ai-assistant/scripts/validate_ai_engine_output.py
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
Low
Affected versions and remediation
This report applies to rainskills@0.1.50.
See all versions of rainskills for other recorded verdicts.
- Review the evidence and your use of rainskills@0.1.50 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.