Skills/ClawHub/image-generation-2

image-generation-2@1.0.5

VERIFIED· install only

Publisher claims: "Single-gateway image generation CLI for async text-to-image and image-to-image, with polling, download handling, and request alignment to the current gateway..." Observed in sandbox: reads credential files.

Registry ClawHubPublisher 632657122 · publishing for 239 daysInstalls 877Last detonated 22 min ago
$clawhub install image-generation-2
WatchReport an issue

Coverage

Install scripts ran; no agent task scenario for this bundle.
Tested
install scripts, with decoy credentials in place · second launch with the clock 45 days ahead · every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (2 scenarios; install scripts ran; no agent task scenario for this bundle) on 2026-11-15 and scored it 82/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: reads credential files.

Behavior trace

Honeypot run · 2 s · 2 scenarios
t+CategoryObserved action
0.0sprocessinstall script run in the sandbox
0.8sprocessexec /app/apps/web/node_modules/.bin/npm
0.8sprocessexec /root/.cache/node/corepack/v1/pnpm/10.28.0/dist/node-gyp-bin/npm
0.8sprocessexec /app/node_modules/.bin/npm
0.8sprocessexec /pnpm/npm
0.8sprocessexec /usr/local/sbin/npm
0.8sprocessexec /usr/local/bin/npm
0.8sprocessexec /app/apps/web/node_modules/.bin/bun
0.8sprocessexec /root/.cache/node/corepack/v1/pnpm/10.28.0/dist/node-gyp-bin/bun
0.8sprocessexec /app/node_modules/.bin/bun
0.8sprocessexec /pnpm/bun
0.8sprocessexec /usr/local/sbin/bun
0.8sprocessexec /usr/local/bin/bun
0.8sprocessexec /usr/sbin/bun
0.8sprocessexec /usr/bin/bun
0.8sprocessexec /sbin/bun
0.8sprocessexec /bin/bun
0.8sprocessexec /app/apps/web/node_modules/.bin/npx
0.8sprocessexec /root/.cache/node/corepack/v1/pnpm/10.28.0/dist/node-gyp-bin/npx
0.8sprocessexec /app/node_modules/.bin/npx
0.8sprocessexec /pnpm/npx
0.8sprocessexec /usr/local/sbin/npx
0.8sprocessexec /usr/local/bin/npx
0.8sprocessexec /app/apps/web/node_modules/.bin/sips
0.8sprocessexec /root/.cache/node/corepack/v1/pnpm/10.28.0/dist/node-gyp-bin/sips
0.8sprocessexec /app/node_modules/.bin/sips
0.8sprocessexec /pnpm/sips
0.8sprocessexec /usr/local/sbin/sips
0.8sprocessexec /usr/local/bin/sips
0.8sprocessexec /usr/sbin/sips
0.8sprocessexec /usr/bin/sips
0.8sprocessexec /sbin/sips
0.8sprocessexec /bin/sips
0.8sprocessexec /app/apps/web/node_modules/.bin/cwebp
0.8sprocessexec /root/.cache/node/corepack/v1/pnpm/10.28.0/dist/node-gyp-bin/cwebp
0.8sprocessexec /app/node_modules/.bin/cwebp
0.8sprocessexec /pnpm/cwebp
0.8sprocessexec /usr/local/sbin/cwebp
0.8sprocessexec /usr/local/bin/cwebp
0.8sprocessexec /usr/sbin/cwebp
0.8sprocessexec /usr/bin/cwebp
0.8sprocessexec /sbin/cwebp
0.8sprocessexec /bin/cwebp
0.8sprocessexec /app/apps/web/node_modules/.bin/magick
0.8sprocessexec /root/.cache/node/corepack/v1/pnpm/10.28.0/dist/node-gyp-bin/magick
0.8sprocessexec /app/node_modules/.bin/magick
0.8sprocessexec /pnpm/magick
0.8sprocessexec /usr/local/sbin/magick
0.8sprocessexec /usr/local/bin/magick
0.8sprocessexec /usr/sbin/magick
0.8sprocessexec /usr/bin/magick
0.8sprocessexec /sbin/magick
0.8sprocessexec /bin/magick
0.8sprocessexec /app/apps/web/node_modules/.bin/convert
0.8sprocessexec /root/.cache/node/corepack/v1/pnpm/10.28.0/dist/node-gyp-bin/convert
0.8sprocessexec /app/node_modules/.bin/convert
0.8sprocessexec /pnpm/convert
0.8sprocessexec /usr/local/sbin/convert
0.8sprocessexec /usr/local/bin/convert
0.8sprocessexec /usr/sbin/convert
0.8sprocessexec /usr/bin/convert
0.8sprocessexec /sbin/convert
0.8sprocessexec /bin/convert
0.8sprocessscript backend runs setup only
0.8sprocessscript backend runs setup only
1.1sprocesssecond launch, clock +45 days, CI unset
1.8sfilesystemread ~/.npmrc
1.8sprocessexec /app/apps/web/node_modules/.bin/npm
1.8sprocessexec /root/.cache/node/corepack/v1/pnpm/10.28.0/dist/node-gyp-bin/npm
1.8sprocessexec /app/node_modules/.bin/npm
1.8sprocessexec /pnpm/npm
1.8sprocessexec /usr/local/sbin/npm
1.8sprocessexec /usr/local/bin/npm
1.8sprocessexec /app/apps/web/node_modules/.bin/bun
1.8sprocessexec /root/.cache/node/corepack/v1/pnpm/10.28.0/dist/node-gyp-bin/bun
1.8sprocessexec /app/node_modules/.bin/bun
1.8sprocessexec /pnpm/bun
1.8sprocessexec /usr/local/sbin/bun
1.8sprocessexec /usr/local/bin/bun
1.8sprocessexec /usr/sbin/bun
1.8sprocessexec /usr/bin/bun
1.8sprocessexec /sbin/bun
1.8sprocessexec /bin/bun
1.8sprocessexec /app/apps/web/node_modules/.bin/npx
1.8sprocessexec /root/.cache/node/corepack/v1/pnpm/10.28.0/dist/node-gyp-bin/npx
1.8sprocessexec /app/node_modules/.bin/npx
1.8sprocessexec /pnpm/npx
1.8sprocessexec /usr/local/sbin/npx
1.8sprocessexec /usr/local/bin/npx
1.8sprocessexec /app/apps/web/node_modules/.bin/sips
1.8sprocessexec /root/.cache/node/corepack/v1/pnpm/10.28.0/dist/node-gyp-bin/sips
1.8sprocessexec /app/node_modules/.bin/sips
1.8sprocessexec /pnpm/sips
1.8sprocessexec /usr/local/sbin/sips
1.8sprocessexec /usr/local/bin/sips
1.8sprocessexec /usr/sbin/sips
1.8sprocessexec /usr/bin/sips
1.8sprocessexec /sbin/sips
1.8sprocessexec /bin/sips
1.8sprocessexec /app/apps/web/node_modules/.bin/cwebp
1.8sprocessexec /root/.cache/node/corepack/v1/pnpm/10.28.0/dist/node-gyp-bin/cwebp
1.8sprocessexec /app/node_modules/.bin/cwebp
1.8sprocessexec /pnpm/cwebp
1.8sprocessexec /usr/local/sbin/cwebp
1.8sprocessexec /usr/local/bin/cwebp
1.8sprocessexec /usr/sbin/cwebp
1.8sprocessexec /usr/bin/cwebp
1.8sprocessexec /sbin/cwebp
1.8sprocessexec /bin/cwebp
1.8sprocessexec /app/apps/web/node_modules/.bin/magick
1.8sprocessexec /root/.cache/node/corepack/v1/pnpm/10.28.0/dist/node-gyp-bin/magick
1.8sprocessexec /app/node_modules/.bin/magick
1.8sprocessexec /pnpm/magick
1.8sprocessexec /usr/local/sbin/magick
1.8sprocessexec /usr/local/bin/magick
1.8sprocessexec /usr/sbin/magick
1.8sprocessexec /usr/bin/magick
1.8sprocessexec /sbin/magick
1.8sprocessexec /bin/magick
1.8sprocessexec /app/apps/web/node_modules/.bin/convert
1.8sprocessexec /root/.cache/node/corepack/v1/pnpm/10.28.0/dist/node-gyp-bin/convert
1.8sprocessexec /app/node_modules/.bin/convert
1.8sprocessexec /pnpm/convert
1.8sprocessexec /usr/local/sbin/convert
1.8sprocessexec /usr/local/bin/convert
1.8sprocessexec /usr/sbin/convert
1.8sprocessexec /usr/bin/convert
1.8sprocessexec /sbin/convert
1.8sprocessexec /bin/convert

Static findings

HIGH
Access to sensitive file pathsscripts/main.ts:403 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesreturn existsSync(path.join(baseDir, ".env")) || existsSync(path.join(baseDir, "EXTEND.md"));Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
npx invocation of non-well-known packageSKILL.md:140 · npx invocation of non-well-known package — may execute untrusted code`{baseDir}` is the directory containing this file. `${BUN_X}` is either `bun` or `npx -y bun`.Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
HIGH
Access to sensitive file pathsscripts/vendor/shared-image-generation/scripts/doctor.mjs:284 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filessuggestions.push(`Provide IMAGE_GEN_API_KEY, then rerun \`npm run setup -- --project . --persist-api-key\` or write .image-skills/${skillNamespace}/.env before using gateway generation`);Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/vendor/shared-image-generation/scripts/doctor.mjs:283 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system fileswarnings.push(`IMAGE_GEN_API_KEY was not detected in the environment or project .image-skills/${skillNamespace}/.env`);Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/vendor/shared-image-generation/scripts/setup.mjs:28 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files--scope <target> Where to write the local .env: project or home (default: project)Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/setup.mjs:28 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files--scope <target> Where to write the local .env: project or home (default: project)Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/doctor.mjs:90 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesconst projectEnvPath = path.join(projectRoot, ".image-skills", skillNamespace, ".env");Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/vendor/shared-image-generation/scripts/main.ts:477 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files...(await loadEnvFile(path.join(projectRoot, ".image-skills", SKILL_NAMESPACE, ".env"))),Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/vendor/shared-image-generation/scripts/doctor.mjs:90 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesconst projectEnvPath = path.join(projectRoot, ".image-skills", skillNamespace, ".env");Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/vendor/shared-image-generation/scripts/main.ts:476 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files...(await loadEnvFile(path.join(home, ".image-skills", SKILL_NAMESPACE, ".env"))),Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/doctor.mjs:216 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filessuggestions.push(`Provide IMAGE_GEN_API_KEY, then rerun \`npm run setup -- --project . --persist-api-key\` or write .image-skills/${skillNamespace}/.env`);Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/vendor/shared-image-generation/scripts/setup.mjs:11 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesconst defaultEnvPath = `${defaultConfigDir}/.env`;Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/main.ts:476 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files...(await loadEnvFile(path.join(home, ".image-skills", SKILL_NAMESPACE, ".env"))),Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/main.ts:477 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files...(await loadEnvFile(path.join(projectRoot, ".image-skills", SKILL_NAMESPACE, ".env"))),Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/setup.mjs:11 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesconst defaultEnvPath = `${defaultConfigDir}/.env`;Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/vendor/shared-image-generation/scripts/main.ts:403 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesreturn existsSync(path.join(baseDir, ".env")) || existsSync(path.join(baseDir, "EXTEND.md"));Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/doctor.mjs:283 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system fileswarnings.push(`IMAGE_GEN_API_KEY was not detected in the environment or project .image-skills/${skillNamespace}/.env`);Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/doctor.mjs:284 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filessuggestions.push(`Provide IMAGE_GEN_API_KEY, then rerun \`npm run setup -- --project . --persist-api-key\` or write .image-skills/${skillNamespace}/.env before using gateway generation`);Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/vendor/shared-image-generation/scripts/doctor.mjs:216 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filessuggestions.push(`Provide IMAGE_GEN_API_KEY, then rerun \`npm run setup -- --project . --persist-api-key\` or write .image-skills/${skillNamespace}/.env`);Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
File type combined with upload actionscripts/build-visual-brief.mjs:291 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(JSON.stringify({ ...summary, outputPath }, null, 2));Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
HIGH
Access to sensitive file pathsscripts/vendor/shared-image-generation/scripts/doctor.mjs:214 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesif (!mark("gateway-api-key", hasApiKey, `Need IMAGE_GEN_API_KEY in env or .image-skills/${skillNamespace}/.env`)) {Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/setup.mjs:33 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files1) Optionally writes IMAGE_GEN_API_KEY into the local skill .envFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsSKILL.md:256 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files- `<cwd>/.image-skills/.env`Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsSKILL.md:257 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files- `$HOME/.image-skills/.env`Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/main.ts:577 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesAlso loaded: <project>/.image-skills/${SKILL_NAMESPACE}/.env and ~/.image-skills/${SKILL_NAMESPACE}/.envFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsSKILL.md:62 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files- If `IMAGE_GEN_API_KEY` is missing: tell the user image generation needs an API key and offer to configure it now by writing `.image-skills/image-generation/.env` on the user's behalfFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/vendor/shared-image-generation/scripts/setup.mjs:33 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files1) Optionally writes IMAGE_GEN_API_KEY into the local skill .envFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsSKILL.md:49 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files…se **`IMAGE_GEN_API_KEY`**. It may also live in `.image-skills/image-generation/.env` as `IMAGE_GEN_API_KEY=...`. After the user approves, the agent may persist it …Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/vendor/shared-image-generation/scripts/main.ts:577 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesAlso loaded: <project>/.image-skills/${SKILL_NAMESPACE}/.env and ~/.image-skills/${SKILL_NAMESPACE}/.envFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/main.ts:58 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files…eys, then add it to the environment or project .image-skills/${SKILL_NAMESPACE}/.env. IMAGE_GEN_API_KEY is still accepted as a compatibility alias. If you are setti…Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/doctor.mjs:214 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesif (!mark("gateway-api-key", hasApiKey, `Need IMAGE_GEN_API_KEY in env or .image-skills/${skillNamespace}/.env`)) {Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsSKILL.md:254 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesSupported `.env` locations:Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/vendor/shared-image-generation/scripts/main.ts:58 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files…eys, then add it to the environment or project .image-skills/${SKILL_NAMESPACE}/.env. IMAGE_GEN_API_KEY is still accepted as a compatibility alias. If you are setti…Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
npx invocation of non-well-known packagescripts/vendor/shared-image-generation/scripts/style-menu.mjs:51 · npx invocation of non-well-known package — may execute untrusted codeconsole.log(" npx -y bun scripts/main.ts \\");Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
File type combined with upload actionscripts/discover-models.mjs:280 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(`Registry already exists (skipped): ${summary.outputPath}`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionscripts/vendor/shared-image-generation/scripts/discover-models.mjs:283 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(`Wrote starter registry: ${summary.outputPath}`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionscripts/vendor/shared-image-generation/scripts/build-visual-brief.mjs:294 · File type combined with upload action — agent may exfiltrate local data filesif (outputPath) console.log(`Brief written: ${outputPath}`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
npx invocation of non-well-known packagescripts/style-menu.mjs:51 · npx invocation of non-well-known package — may execute untrusted codeconsole.log(" npx -y bun scripts/main.ts \\");Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagescripts/doctor.mjs:279 · npx invocation of non-well-known package — may execute untrusted codeif (!hasBun && !hasNpx) errors.push("Need Bun or npx so Bun-based workflow scripts can run");Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
File type combined with upload actionscripts/discover-models.mjs:283 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(`Wrote starter registry: ${summary.outputPath}`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionscripts/main.ts:1579 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(r.outputPath);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
npx invocation of non-well-known packagescripts/vendor/shared-image-generation/scripts/doctor.mjs:279 · npx invocation of non-well-known package — may execute untrusted codeif (!hasBun && !hasNpx) errors.push("Need Bun or npx so Bun-based workflow scripts can run");Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
File type combined with upload actionscripts/build-visual-brief.mjs:294 · File type combined with upload action — agent may exfiltrate local data filesif (outputPath) console.log(`Brief written: ${outputPath}`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionscripts/vendor/shared-image-generation/scripts/discover-models.mjs:280 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(`Registry already exists (skipped): ${summary.outputPath}`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
npx invocation of non-well-known packagescripts/vendor/shared-image-generation/scripts/package.json:7 · npx invocation of non-well-known package — may execute untrusted code"test": "npx -y bun test"Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
File type combined with upload actionscripts/vendor/shared-image-generation/scripts/build-visual-brief.mjs:291 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(JSON.stringify({ ...summary, outputPath }, null, 2));Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
npx invocation of non-well-known packagescripts/package.json:7 · npx invocation of non-well-known package — may execute untrusted code"test": "npx -y bun test"Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
File type combined with upload actionscripts/vendor/shared-image-generation/scripts/main.ts:1579 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(r.outputPath);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07

Cost to the agent

Instructions loaded
≈5,165 tok
2 files · 60 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.