registry / skillstore / 0.1.9

skillstore@0.1.9

Skillstore CLI - AI Skills marketplace for Claude Code

AI Security Review

scanned 2h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

No blocking static signals were detected.

Trigger

User runs `skillstore add`, `install`, `update`, or `plugin install`.

Impact

A user-selected marketplace skill can become available to Codex, Claude Code, or another selected agent.

Mechanism

Fetch remote skill artifacts, write them locally, then symlink/copy into agent skill paths.

Rationale

No concrete malware, credential exfiltration, lifecycle execution, or stealth persistence was found. The package nevertheless provides an explicit user-command path for installing remote AI-agent skills, which warrants a warning under the stated policy.

Evidence

package.jsondist/cli/index.jsdist/commands/add.jsdist/lib/plugin-config.jsdist/lib/plugin-download.jsdist/lib/installer.js~/.agents/skills/<slug>~/.agents/.skill-lock.json~/.codex/skills/<slug>~/.claude/skills/<slug>

Network endpoints1

skillstore.io/api

Decision evidence

public snapshot

AI called this Suspicious at 90.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

`dist/commands/add.js` downloads selected remote skills and defaults to global agent installation.
`dist/lib/plugin-download.js` writes downloaded artifact files under the configured skill directory.
`dist/lib/installer.js` symlinks or copies skills into supported AI-agent skill directories.
`dist/commands/add.js` permits user-selected `--skip-verify` for manifest verification.

Evidence against

`package.json` has only `prepublishOnly`; no preinstall/install/postinstall hook.
`dist/cli/index.js` activates install behavior only through explicit CLI subcommands.
No child-process, eval/vm, credential harvesting, or import-time network execution found in published JavaScript.
`dist/lib/plugin-download.js` and `dist/lib/installer.js` reject traversal paths before writes.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetwork

Supply chain

UrlStrings

ManifestNo manifest risk signals triggered.

scanned 23 file(s), 137 KB of source, external domains: skillstore.io

Source & flagged code

4 flagged

dist/commands/add.jsView file

•Published source reference

Medium

Ai Review Evidence

`dist/commands/add.js` downloads selected remote skills and defaults to global agent installation.

dist/commands/add.jsView on unpkg

•Published source reference

Medium

Ai Review Evidence

`dist/commands/add.js` permits user-selected `--skip-verify` for manifest verification.

dist/commands/add.jsView on unpkg

dist/lib/plugin-download.jsView file

•Published source reference

Medium

Ai Review Evidence

`dist/lib/plugin-download.js` writes downloaded artifact files under the configured skill directory.

dist/lib/plugin-download.jsView on unpkg

dist/lib/installer.jsView file

•Published source reference

Medium

Ai Review Evidence

`dist/lib/installer.js` symlinks or copies skills into supported AI-agent skill directories.

dist/lib/installer.jsView on unpkg

Source & flagged code

4 flagged · loading source

dist/commands/add.jsView file

•Published source reference

Medium

Ai Review Evidence

`dist/commands/add.js` downloads selected remote skills and defaults to global agent installation.

dist/commands/add.jsView on unpkg

•Published source reference

Medium

Ai Review Evidence

`dist/commands/add.js` permits user-selected `--skip-verify` for manifest verification.

dist/commands/add.jsView on unpkg

dist/lib/plugin-download.jsView file

•Published source reference

Medium

Ai Review Evidence

`dist/lib/plugin-download.js` writes downloaded artifact files under the configured skill directory.

dist/lib/plugin-download.jsView on unpkg

dist/lib/installer.jsView file

•Published source reference

Medium

Ai Review Evidence

`dist/lib/installer.js` symlinks or copies skills into supported AI-agent skill directories.

dist/lib/installer.jsView on unpkg

Findings

6 Medium4 Low

MediumNetwork

MediumEnvironment Vars

MediumAi Review Evidencedist/commands/add.js

MediumAi Review Evidencedist/lib/plugin-download.js

MediumAi Review Evidencedist/lib/installer.js

MediumAi Review Evidencedist/commands/add.js

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowUrl Strings

LPM CLI

Source & flagged code

4 flagged

dist/commands/add.jsView file

•Published source reference

Medium

Ai Review Evidence

`dist/commands/add.js` downloads selected remote skills and defaults to global agent installation.

dist/commands/add.jsView on unpkg

•Published source reference

Medium

Ai Review Evidence

`dist/commands/add.js` permits user-selected `--skip-verify` for manifest verification.

dist/commands/add.jsView on unpkg

dist/lib/plugin-download.jsView file

•Published source reference

Medium

Ai Review Evidence

`dist/lib/plugin-download.js` writes downloaded artifact files under the configured skill directory.

dist/lib/plugin-download.jsView on unpkg

dist/lib/installer.jsView file

•Published source reference

Medium

Ai Review Evidence

`dist/lib/installer.js` symlinks or copies skills into supported AI-agent skill directories.

dist/lib/installer.jsView on unpkg