Is agent-skill@0.6.0 safe to install?

agent-skill@0.6.0

VERIFIED· install only

Publisher claims: "dsmith slash-command sources and per-AI-tool renderers (Claude Code, Codex, Cursor, Gemini CLI, AGENTS.md)" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher dsmith-dev · publishing for 13 daysInstalls 876Last detonated 4d ago

$claude mcp add agent-skill -- npx -y @dsmith-dev/agent-skill

Watch Report an issue

Coverage

Nothing executable in the bundle ran; the trace covers the install step only.

Tested: every file read, file written and host contacted by what ran
Not tested: use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-10 and scored it 87/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

0.0sprocessno install scripts to re-run

Static findings

MEDIUM

npx invocation of non-well-known packagecommands/ds-audit.md:8 · npx invocation of non-well-known package — may execute untrusted code

`npx dsmith audit --json {{args}}`를 실행하고 stdout JSON을 읽는다. stderr의 힌트·경고도 그대로 전한다.

Fix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

npx invocation of non-well-known packagecommands/ds-ai.md:17 · npx invocation of non-well-known package — may execute untrusted code4. 사람이 확인하면 1단계와 같은 인자로 `--dry-run` 없이 `npx dsmith ai --json`을 실행한다.Fix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

npx invocation of non-well-known packagecommands/ds-ai.md:19 · npx invocation of non-well-known package — may execute untrusted code

6. MCP 서버는 선택이다. 사람이 원할 때만 `npx dsmith install --mcp`를 안내한다. 등록하면 AI 도구가 `get_component`로 카탈로그를 읽을 수 있다.

Fix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

npx invocation of non-well-known packagecommands/ds-decide.md:17 · npx invocation of non-well-known package — may execute untrusted code- 목록: `npx dsmith decide --list --status pending --json`Fix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

npx invocation of non-well-known packagecommands/ds-ai.md:10 · npx invocation of non-well-known package — may execute untrusted code

1. `npx dsmith ai --dry-run --json {{args}}`를 실행하고 stdout JSON을 읽는다. 아직 아무 파일도 쓰지 않는다. stderr의 힌트·경고도 그대로 전한다.

Fix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

npx invocation of non-well-known packagecommands/ds-check.md:20 · npx invocation of non-well-known package — may execute untrusted code

MCP 도구가 없으면(서버 미등록) 도구를 쓸 수 없다고 말하고 "`npx dsmith install --mcp` 후 AI 도구를 재시작"하라고 안내한다. 추측으로 토큰을 고르지 않는다.

Fix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

npx invocation of non-well-known packagecommands/ds-decide.md:18 · npx invocation of non-well-known package — may execute untrusted code- 카드: `npx dsmith decide --explain "<item>" --json`Fix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

npx invocation of non-well-known packagecommands/ds-decide.md:12 · npx invocation of non-well-known package — may execute untrusted code4. 고른 뒤 `npx dsmith decide --item "<item>" --choose "<id>"`를 실행해 기록한다.Fix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

npx invocation of non-well-known packagedist/renderers/shared.js:5 · npx invocation of non-well-known package — may execute untrusted codeexport const DEFAULT_CLI = "npx dsmith";Fix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

npx invocation of non-well-known packagecommands/ds-guard.md:25 · npx invocation of non-well-known package — may execute untrusted code

5. PR 검사는 `npx dsmith guard --ci --base <기준 브랜치>`다. 신규 하드코딩이 있으면 종료 코드 1이다. 코멘트는 `--comment`로 달며 실패해도 종료 코드는 그대로다.

Fix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

npx invocation of non-well-known packagecommands/ds-init.md:10 · npx invocation of non-well-known package — may execute untrusted code

1. `npx dsmith init --dry-run --json {{args}}`를 실행하고 stdout JSON을 읽는다. 아직 아무 파일도 쓰지 않는다. stderr의 힌트·경고도 그대로 전한다.

Fix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

npx invocation of non-well-known packagecommands/ds-detect.md:23 · npx invocation of non-well-known package — may execute untrusted code

파일을 직접 고치기 전에 사람에게 확인받는다. 고친 뒤에는 `npx dsmith detect --json`을 다시 실행해 반영됐는지 확인한다.

Fix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

npx invocation of non-well-known packagecommands/ds-decide.md:19 · npx invocation of non-well-known package — may execute untrusted code- 그래도 안 되면 `npx dsmith install --mcp` 후 AI 도구를 재시작하라고 안내한다.Fix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

npx invocation of non-well-known packagedist/renderers/shared.d.ts:36 · npx invocation of non-well-known package — may execute untrusted code/** 사람에게 보이는 안내 문장의 `npx dsmith`를 `cli`로 바꾼다. */Fix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

npx invocation of non-well-known packagedist/renderers/shared.js:6 · npx invocation of non-well-known package — may execute untrusted code

/** 명령 소스의 본문에서 `npx dsmith`를 `cli`로 바꾼다. 기본값이면 입력을 그대로 돌려줘 출력이 바이트 동일하다. */

Fix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

npx invocation of non-well-known packagedist/renderers/shared.d.ts:13 · npx invocation of non-well-known package — may execute untrusted code

* 명령 본문과 AGENTS.md 블록이 부르는 CLI 실행 명령(기본 `npx dsmith`). 배포 전 로컬 빌드에서는

Fix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

npx invocation of non-well-known packagedist/renderers/shared.d.ts:34 · npx invocation of non-well-known package — may execute untrusted code

/** 명령 소스의 본문에서 `npx dsmith`를 `cli`로 바꾼다. 기본값이면 입력을 그대로 돌려줘 출력이 바이트 동일하다. */

Fix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

npx invocation of non-well-known packagecommands/ds-migrate.md:30 · npx invocation of non-well-known package — may execute untrusted code

3. `plan.stale.changed > 0 || plan.stale.added > 0`이면(배열 길이) audit 뒤에 파일이 바뀐 것이니 `npx dsmith audit`를 다시 하라고 알린다.

Fix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

npx invocation of non-well-known packagedist/renderers/agents-md.js:24 · npx invocation of non-well-known package — may execute untrusted code/** "슬래시 없을 때" 칸: uses의 첫 `cli:` 항목 → npx 명령, 없으면 MCP 필요 또는 아직 없음. */Fix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

npx invocation of non-well-known packagecommands/ds.md:10 · npx invocation of non-well-known package — may execute untrusted code

`npx dsmith detect --json {{args}}`를 실행하고 stdout JSON을 읽는다. stderr의 힌트·경고도 그대로 전한다.

Fix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

npx invocation of non-well-known packagecommands/ds-migrate.md:20 · npx invocation of non-well-known package — may execute untrusted code

- `target-props-unknown`: 대상 컴포넌트의 props를 읽지 못해(npm 패키지 미설치·카탈로그에 props 없음) 호출부 prop을 확인할 수 없음. 패키지를 설치하고 `npx dsmith ai`를 다시 실행하거나, 직접 확인한 prop을 `/ds-decide`의 `--map`에 같은 이름으로 넣게 한다

Fix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

npx invocation of non-well-known packagecommands/ds-guard.md:10 · npx invocation of non-well-known package — may execute untrusted code

1. `npx dsmith guard init --dry-run --json {{args}}`를 실행하고 stdout JSON을 읽는다. 아직 아무 파일도 쓰지 않는다. stderr의 힌트·경고도 그대로 전한다.

Fix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

npx invocation of non-well-known packagedist/renderers/shared.d.ts:33 · npx invocation of non-well-known package — may execute untrusted codeexport declare const DEFAULT_CLI = "npx dsmith";Fix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

npx invocation of non-well-known packagecommands/ds-guard.md:19 · npx invocation of non-well-known package — may execute untrusted code

3. 사람이 확인하면 1단계와 같은 인자에서 `--dry-run`을 빼고 `npx dsmith guard init --json`을 실행한다.

Fix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

npx invocation of non-well-known packagedist/renderers/shared.js:27 · npx invocation of non-well-known package — may execute untrusted code/** 사람이 읽는 실행 명령 한 줄(`npx -y [email protected] mcp`). */Fix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

npx invocation of non-well-known packagecommands/ds-migrate.md:32 · npx invocation of non-well-known package — may execute untrusted code

5. 결과를 전한다: 브랜치와 커밋, 리포트 경로, 마이그레이션 id. 되돌리기는 `npx dsmith migrate --revert <id>`다. PR은 dsmith가 열지 않으니 사람이 직접 연다고 말한다.

Fix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

npx invocation of non-well-known packagecommands/ds-init.md:20 · npx invocation of non-well-known package — may execute untrusted code

4. 사람이 확인하면 1단계와 같은 인자에서 `--dry-run`을 빼고, 3단계에서 `--all`을 골랐으면 `--all`을 붙여 `npx dsmith init --json`을 실행한다.

Fix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

npx invocation of non-well-known packagecommands/ds-migrate.md:31 · npx invocation of non-well-known package — may execute untrusted code

…이) audit 뒤에 파일이 바뀐 것이니 `npx dsmith audit`를 다시 하라고 알린다. 4. 사람이 확인하면 1단계와 같은 인자로 `npx dsmith migrate --apply --branch ds/migrate-<날짜>`를 실행한다. close를 포함하기로 했으면 `--close`도 붙인…

Fix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

npx invocation of non-well-known packagedist/renderers/shared.js:12 · npx invocation of non-well-known package — may execute untrusted code/** 사람에게 보이는 안내 문장의 `npx dsmith`를 `cli`로 바꾼다. */Fix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

npx invocation of non-well-known packagecommands/ds-migrate.md:12 · npx invocation of non-well-known package — may execute untrusted code

1. `npx dsmith migrate --json {{args}}`를 실행하고 stdout JSON을 읽는다. stderr의 힌트·경고도 그대로 전한다. 토큰이 없다는 오류면 `/ds-init`을 안내하고 멈춘다.

Fix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

npx invocation of non-well-known packagedist/renderers/shared.d.ts:67 · npx invocation of non-well-known package — may execute untrusted code/** 사람이 읽는 실행 명령 한 줄(`npx -y [email protected] mcp`). */Fix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

npx invocation of non-well-known packagecommands/ds-detect.md:8 · npx invocation of non-well-known package — may execute untrusted code

`npx dsmith detect --json {{args}}`를 실행하고 stdout JSON을 읽는다. stderr의 힌트·경고도 그대로 전한다.

Fix: Pin versions and sources; vendor anything fetched at install time.

AST06

Cost to the agent

Instructions loaded

≈55 tok

1 file · 33 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

No advisories in OSV for @dsmith-dev/agent-skill@0.6.0 as of 4d ago. This is the package itself, not its dependencies.