registry / skillsdeck / 1.0.0

skillsdeck@1.0.0

skillsdeck — an open-source, community-driven catalog of Agent Skills for AI coding agents across all domains.

AI Security Review

scanned 5h ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. No npm lifecycle attack surface is present. Explicit CLI or shell installation copies first-party skill folders into user-selected or known AI-agent skill directories and may retrieve the catalog.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs cli/bin.mjs install or update, or install.sh.

Impact

Can alter an AI agent's loaded skill instructions, but only through an explicit setup command; no unconsented install-time mutation was found.

Mechanism

User-invoked agent-skill installation and catalog retrieval.

Rationale

No concrete malicious behavior, credential exfiltration, remote payload execution, or unconsented lifecycle mutation was found. Per policy, the explicit AI-agent extension setup remains a warn-level lifecycle risk.

Evidence

package.jsoncli/bin.mjsinstall.shskills/no-ai-attribution/SKILL.mdplugins/marketplace.jsonskills/<selected-skill>~/.skillsdeck/installed.json~/.claude/skills~/.agents/skills~/.gemini/skills

Network endpoints2

raw.githubusercontent.com/Teners-net/skillsdeck/main/registry.json/Teners-net/skillsdeck.git

skillsdeck@1.0.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code