Skills/npm/archify-dsh

archify-dsh@1.1.0

VERIFIED· install only

Publisher claims: "Opt-in DeepSeek Harness Skill-only bundle for the Archify architecture-diagram skill." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher tt-a1i · publishing for 253 daysInstalls 53,262Last detonated 4d ago
$claude mcp add archify-dsh -- npx -y @tt-a1i/archify-dsh
WatchReport an issue

Coverage

Nothing executable in the bundle ran; the trace covers the install step only.
Tested
every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-10 and scored it 85/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run

Static findings

HIGH
Access to sensitive file pathsskills/archify/explainer/sources.mjs:14 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files…024 * 1024; const MAX_ASSET_BYTES = 32 * 1024 * 1024; const SECRET_NAME = /^(?:\.env(?:\..*)?|\.npmrc|\.netrc|\.pypirc|\.(?:ssh|aws|gnupg|kube)|(?:id_(?:rsa|dsa|ecd…Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsskills/archify/bin/finalize.mjs:896 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesenv: stage === 'deliver' ? { ...env, ARCHIFY_UPDATE_CHECK_DISABLED: '1' } : env });Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
File type combined with upload actionskills/archify/SKILL.md:45 · File type combined with upload action — agent may exfiltrate local data files…use the complete first command: `node bin/archify.mjs finalize <type> <candidate.json> <output.html> --repo-root <repo-root> --quality showcase --json`. Pass the `--quality` …Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
HIGH
Access to sensitive file pathsskills/archify/explainer/sources.mjs:17 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files…ENVIRONMENT_REFERENCE = /^(?:\$(?:[A-Za-z_][\w]*|\{[A-Za-z_][\w]*\})|(?:process\.env|os\.environ|env)(?:\.[A-Za-z_][\w]*|\[['"][A-Za-z_][\w]*['"]\])|(?:os\.getenv|g…Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
File type combined with upload actionskills/archify/SKILL.md:42 · File type combined with upload action — agent may exfiltrate local data filesnode bin/archify.mjs finalize <type> <candidate.json> <output.html> --quality showcase --jsonFix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionskills/archify/SKILL.md:14 · File type combined with upload action — agent may exfiltrate local data files…and `<slug>.html` in it and reuse it for repairs. Native diagrams use `candidate.json` with `meta.output` relative to the working directory; explainers may use `candidate.archify.md` and a portable output filename. A later request gets a n…Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionskills/archify/bin/archify.mjs:2197 · File type combined with upload action — agent may exfiltrate local data filesfinalize: '<type> <input.json> <output.html> [--json] [--browser-check] [--receipt path] [--out-dir <dir>] [--quality standard|showcase] [--repo-root path] [--candidate-sha256 hex]',Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
Unicode escape sequence detectedskills/archify/renderers/shared/utils.mjs:219 · Unicode escape sequence detected — may contain obfuscated payloads…268F\u2693\u26A1\u26AA-\u26AB\u26BD-\u26BE\u26C4-\u26C5\u26CE\u26D4\u26EA\u26F2-\u26F3\u26F5\u26FA\u26FD\u2705\u270A-\u270B\u2728\u274C\u274E\u2753-\u2755\u2757\u2795-\u2797\u27B0\u27BF\u2B1B-\u2B…Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST07
MEDIUM
File type combined with upload actionskills/archify/bin/archify.mjs:2193 · File type combined with upload action — agent may exfiltrate local data filesrender: '<type> <input.json> [output.html] [--quality standard|showcase] [--repo-root path]',Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionskills/archify/bin/archify.mjs:1748 · File type combined with upload action — agent may exfiltrate local data filessupportedFixes: ['choose an output whose .delivery.json sidecar is distinct from every input and the HTML artifact'],Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionskills/archify/bin/preview.mjs:949 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(`output ${preview.output}`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionskills/archify/bin/archify.mjs:2195 · File type combined with upload action — agent may exfiltrate local data filesdeliver: '<type> <input.json> [output.html] [--json] [--open] [--quality standard|showcase] [--repo-root path]',Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionskills/archify/renderers/shared/cli.mjs:45 · File type combined with upload action — agent may exfiltrate local data files// Common CLI head: node render-<type>.mjs [input.json] [output.html]Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionskills/archify/bin/archify.mjs:2194 · File type combined with upload action — agent may exfiltrate local data filescompare: 'architecture <base.json> <head.json> [output.html] [--receipt path] [--json] [--quality standard|showcase] [--repo-root path]',Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionskills/archify/bin/preview.mjs:948 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(`watching ${preview.input}`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07

Cost to the agent

Instructions loaded
≈4,681 tok
1 file · 80 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

No advisories in OSV for @tt-a1i/archify-dsh@1.1.0 as of 4d ago. This is the package itself, not its dependencies.

archify-dsh@1.1.0 safety verdict: Verified (install only) — KillerSkills