registry / universal-agent-skills / 0.7.0

universal-agent-skills@0.7.0

Framework-agnostic agent skill library. Drop-in skills for Claude Agent SDK, LangChain, OpenAI Assistants, CrewAI, AutoGen, Cursor, AGENTS.md-compatible tools (Codex/OpenCode/Antigravity), and any AI agent runtime.

AI Security Review

scanned 2h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

No blocking static signals were detected.

Trigger

Explicit use of the `cowork-plugin-customizer` skill to set up or customize a plugin.

Impact

May alter a selected plugin's `.mcp.json` to configure connectors; no automatic exfiltration, remote payload execution, or stealth persistence was found.

Mechanism

Agent-prompted MCP discovery and target-plugin configuration mutation.

Rationale

No concrete malicious chain was found: there are no lifecycle hooks, import-time writes, direct network clients, credential harvesting, or payload execution. The explicit agent-directed MCP configuration mutation is a real control-surface capability, so it should be warned rather than marked clean.

Evidence

package.jsonsrc/index.jsscripts/export-skill.jsskills/cowork-plugin-management-cowork-plugin-customizer/SKILL.mdskills/cowork-plugin-management-cowork-plugin-customizer/references/mcp-servers.mdskills/web-artifacts-builder/scripts/shadcn-components.tar.gzmnt/.local-pluginsmnt/.pluginsplugin.json.mcp.json

Decision evidence

public snapshot

AI called this Suspicious at 82.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

`skills/cowork-plugin-management-cowork-plugin-customizer/SKILL.md` directs an agent to update a target plugin's MCP config, defaulting to `.mcp.json`.
That skill instructs agents to search mounted `mnt/.local-plugins` and `mnt/.plugins` directories.
The MCP workflow can invoke connector discovery and connection suggestions during an explicit plugin-customization request.

Evidence against

`package.json` defines no `preinstall`, `install`, `postinstall`, or `prepare` lifecycle hook.
`src/index.js` only reads bundled `SKILL.md` files and returns adapter data; it has no network or child-process execution.
The config mutation is scoped to an explicit customization skill and says the user completes connector authentication.
`scripts/export-skill.js` is manually invoked and writes only generated exports beneath the package's `skills/` tree.
The bundled archive contains UI component source paths; the font/blob findings do not establish executable payload behavior.

Behavioral surface

Source

ChildProcessFilesystem

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 12 file(s), 52.5 KB of source

Source & flagged code

3 flagged

skills/xlsx/scripts/office/validate.pyView file

•path = [redacted].py kind = build_helper sizeBytes = 6142 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

skills/xlsx/scripts/office/validate.pyView on unpkg

skills/web-artifacts-builder/scripts/shadcn-components.tar.gzView file

•path = skills/web-artifacts-builder/scripts/shadcn-components.tar.gz kind = compressed_blob sizeBytes = 19967 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

skills/web-artifacts-builder/scripts/shadcn-components.tar.gzView on unpkg

skills/morning/assets/fonts/fraunces-latin-600-normal.woff2View file

•path = [redacted]-latin-600-normal.woff2 kind = high_entropy_blob sizeBytes = 18096 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

skills/morning/assets/fonts/fraunces-latin-600-normal.woff2View on unpkg

Source & flagged code

3 flagged · loading source

skills/xlsx/scripts/office/validate.pyView file

•path = [redacted].py kind = build_helper sizeBytes = 6142 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

skills/xlsx/scripts/office/validate.pyView on unpkg

skills/web-artifacts-builder/scripts/shadcn-components.tar.gzView file

•path = skills/web-artifacts-builder/scripts/shadcn-components.tar.gz kind = compressed_blob sizeBytes = 19967 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

skills/web-artifacts-builder/scripts/shadcn-components.tar.gzView on unpkg

skills/morning/assets/fonts/fraunces-latin-600-normal.woff2View file

•path = [redacted]-latin-600-normal.woff2 kind = high_entropy_blob sizeBytes = 18096 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

skills/morning/assets/fonts/fraunces-latin-600-normal.woff2View on unpkg

Findings

1 High3 Medium2 Low

HighShips High Entropy Blobskills/morning/assets/fonts/fraunces-latin-600-normal.woff2

MediumShips Build Helperskills/xlsx/scripts/office/validate.py

MediumShips Compressed Blobskills/web-artifacts-builder/scripts/shadcn-components.tar.gz

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LPM CLI

Source & flagged code

3 flagged

skills/xlsx/scripts/office/validate.pyView file

•path = [redacted].py kind = build_helper sizeBytes = 6142 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

skills/xlsx/scripts/office/validate.pyView on unpkg

skills/web-artifacts-builder/scripts/shadcn-components.tar.gzView file

•path = skills/web-artifacts-builder/scripts/shadcn-components.tar.gz kind = compressed_blob sizeBytes = 19967 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

skills/web-artifacts-builder/scripts/shadcn-components.tar.gzView on unpkg

skills/morning/assets/fonts/fraunces-latin-600-normal.woff2View file

•path = [redacted]-latin-600-normal.woff2 kind = high_entropy_blob sizeBytes = 18096 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

skills/morning/assets/fonts/fraunces-latin-600-normal.woff2View on unpkg