babylite@2.0.2
VERIFIED· install onlyPublisher claims: "Agent skills for game development: an offline API reference for @babylonjs/lite (Babylon.js Lite, the WebGPU factory-function renderer) plus a distilled game-dev concept cheatsheet (game feel, systems, rendering, performance) that points at the interactiv" Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Registry npm (MCP server)Publisher andares · publishing for 61 daysInstalls 822Last detonated 2d ago
Coverage
Nothing executable in the bundle ran; the trace covers the install step only.- Tested
- every file read, file written and host contacted by what ran
- Not tested
- use of the skill by an agent
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-12 and scored it 87/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run
Static findings
HIGH
Access to sensitive file pathsskills/babylite/SKILL.md:59 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05| `references/topics/04-loading-assets.md` | glTF/GLB、Draco/meshopt、IBL/.env/HDR、天空盒、`.babylon`、Texture2D/KTX |Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.HIGH
Latin word with Cyrillic or Greek look-alike letters (homoglyph)skills/babylite/references/raw-doc/architecture/19-loader-hdr.md:143 · Latin word with Cyrillic or Greek look-alike letters (homoglyph)
AST01sinφFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.HIGH
Latin word with Cyrillic or Greek look-alike letters (homoglyph)skills/babylite/references/raw-doc/architecture/06-pbr-material.md:887 · Latin word with Cyrillic or Greek look-alike letters (homoglyph)
AST01cosθFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.HIGH
Latin word with Cyrillic or Greek look-alike letters (homoglyph)skills/babylite/references/raw-doc/architecture/19-loader-hdr.md:144 · Latin word with Cyrillic or Greek look-alike letters (homoglyph)
AST01sinφFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.MEDIUM
npx invocation of non-well-known packageAGENTS.md:37 · npx invocation of non-well-known package — may execute untrusted code
AST06与 **npm 包 `@andares/babylite`**（含安装器 CLI，`npx @andares/babylite install [<skill>]`）。Fix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packageAGENTS.md:36 · npx invocation of non-well-known package — may execute untrusted code
AST06- 分发渠道：**公开 GitHub 仓库**（skills.sh 直接索引，`npx skills add andares/babylite --skill <name>`）Fix: Pin versions and sources; vendor anything fetched at install time.HIGH
Latin word with Cyrillic or Greek look-alike letters (homoglyph)skills/babylite/references/raw-doc/architecture/00-overview.md:1426 · Latin word with Cyrillic or Greek look-alike letters (homoglyph)
AST01cosθFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.MEDIUM
npx invocation of non-well-known packageAGENTS.md:113 · npx invocation of non-well-known package — may execute untrusted code
AST06本包**发布到 npm registry**（`npmjs.com`、`img.shields.io/npm/...` 徽章、`npx @andares/babylite install`Fix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packageAGENTS.md:151 · npx invocation of non-well-known package — may execute untrusted code
AST06用户侧的 `npx ...` 安装说明不在此约束内。Fix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packagebin/babylite.mjs:9 · npx invocation of non-well-known package — may execute untrusted code
AST06* npx @andares/babylite list # what this collection shipsFix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packagebin/babylite.mjs:6 · npx invocation of non-well-known package — may execute untrusted code
AST06* npx @andares/babylite install babylite # just one skillFix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packagebin/babylite.mjs:5 · npx invocation of non-well-known package — may execute untrusted code
AST06* npx @andares/babylite install # all skills → ~/.agents/skills/<name>Fix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packagebin/babylite.mjs:8 · npx invocation of non-well-known package — may execute untrusted code
AST06* npx @andares/babylite install babylite --to <dir> # exact destination directoryFix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packageAGENTS.md:114 · npx invocation of non-well-known package — may execute untrusted code
AST06这类**用户侧**安装命令都保持 npm/npx 写法，这是发行渠道，不改）。上表里的 pnpm 只约束**本仓库的开发与发布流程**。Fix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packagebin/babylite.mjs:7 · npx invocation of non-well-known package — may execute untrusted code
AST06* npx @andares/babylite install --project # → ./.agents/skills/<name>Fix: Pin versions and sources; vendor anything fetched at install time.Cost to the agent
Instructions loaded
≈7,166 tok
3 files · 80 in bundle
Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.
Known vulnerabilities
No advisories in OSV for @andares/babylite@2.0.2 as of 2d ago. This is the package itself, not its dependencies.