Skills/Claude Code plugins/outputai

outputai@0.3.0

CAUTION

Publisher claims: "Output.ai workflow development toolkit for Claude Code. Adds 5 specialist agents (planner, builder, debugger, prompt writer, quality reviewer), 40+ slash-command skills covering scaffolding, debugging, evaluation, and credential management, plus a SessionStart hook that auto-loads Output SDK conventions so Claude understands the framework before the first prompt." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry Claude Code plugin marketplacePublisher growthxai · joined 0 days agoInstalls 0Last detonated 2 h ago
What would fix thisWatchDispute verdict

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-27 and scored it 68/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Fake instruction boundary tag; Fake instruction boundary tag; Fake instruction boundary tag. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

CRITICAL
Fake instruction boundary tagagents/workflow_prompt_writer.md:39 · Fake instruction boundary tagFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01
CRITICAL
Fake instruction boundary tagskills/output-dev-skill-file/SKILL.md:97 · Fake instruction boundary tagFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01
CRITICAL
Fake instruction boundary tagskills/output-dev-prompt-file/SKILL.md:205 · Fake instruction boundary tagFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01
CRITICAL
Fake instruction boundary tagskills/output-dev-prompt-file/SKILL.md:189 · Fake instruction boundary tagFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01
CRITICAL
Fake instruction boundary tagagents/workflow_prompt_writer.md:118 · Fake instruction boundary tagFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01
CRITICAL
Fake instruction boundary tagskills/output-dev-prompt-file/SKILL.md:63 · Fake instruction boundary tagFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01
CRITICAL
Fake instruction boundary tagagents/workflow_prompt_writer.md:78 · Fake instruction boundary tagFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01
CRITICAL
Fake instruction boundary tagskills/output-dev-prompt-file/SKILL.md:65 · Fake instruction boundary tagFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01
CRITICAL
Fake instruction boundary tagagents/workflow_prompt_writer.md:147 · Fake instruction boundary tagFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01
CRITICAL
Fake instruction boundary tagskills/output-dev-skill-file/SKILL.md:158 · Fake instruction boundary tagFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01
CRITICAL
Fake instruction boundary tagskills/output-dev-skill-file/SKILL.md:100 · Fake instruction boundary tagFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01
CRITICAL
Fake instruction boundary tagskills/output-dev-skill-file/SKILL.md:154 · Fake instruction boundary tagFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01
CRITICAL
Fake instruction boundary tagskills/output-dev-eval-testing/SKILL.md:213 · Fake instruction boundary tagFix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST01
CRITICAL
Fake instruction boundary tagskills/output-dev-prompt-file/SKILL.md:197 · Fake instruction boundary tagFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01
CRITICAL
Fake instruction boundary tagskills/output-dev-eval-testing/SKILL.md:219 · Fake instruction boundary tagFix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST01
MEDIUM
npx invocation of non-well-known packageskills/output-debug-workflow/SKILL.md:48 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-credentials-edit/SKILL.md:40 · npx invocation of non-well-known package — may execute untrusted codeFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST06
MEDIUM
npx invocation of non-well-known packageagents/workflow_debugger.md:33 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
HIGH
Access to sensitive file pathsskills/output-credentials-env-vars/SKILL.md:13 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsskills/output-credentials-env-vars/SKILL.md:81 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
npx invocation of non-well-known packageskills/output-credentials-init/SKILL.md:29 · npx invocation of non-well-known package — may execute untrusted codeFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-dev-create-skeleton/SKILL.md:315 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageagents/workflow_debugger.md:37 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageagents/workflow_planner.md:250 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
HIGH
Access to sensitive file pathsskills/output-credentials-env-vars/SKILL.md:24 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
npx invocation of non-well-known packageskills/output-dev-create-skeleton/SKILL.md:244 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-credentials-edit/SKILL.md:26 · npx invocation of non-well-known package — may execute untrusted codeFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-debug-workflow/SKILL.md:79 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-dev-http-client-create/SKILL.md:425 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageagents/workflow_planner.md:254 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-credentials-edit/SKILL.md:22 · npx invocation of non-well-known package — may execute untrusted codeFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-credentials-init/SKILL.md:18 · npx invocation of non-well-known package — may execute untrusted codeFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST06
CRITICAL
Fake instruction boundary tagskills/output-eval-judge-prompt/SKILL.md:239 · Fake instruction boundary tagFix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST01
CRITICAL
Fake instruction boundary tagskills/output-eval-judge-prompt/SKILL.md:224 · Fake instruction boundary tagFix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST01
MEDIUM
npx invocation of non-well-known packageskills/output-credentials-init/SKILL.md:33 · npx invocation of non-well-known package — may execute untrusted codeFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST06
CRITICAL
Fake instruction boundary tagskills/output-meta-project-context/SKILL.md:381 · Fake instruction boundary tagFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01
HIGH
Access to sensitive file pathsskills/output-dev-credentials/SKILL.md:189 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Coercive compliance languageskills/output-dev-prompt-file/SKILL.md:534 · Coercive compliance languageFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01
MEDIUM
npx invocation of non-well-known packageskills/output-credentials-edit/SKILL.md:29 · npx invocation of non-well-known package — may execute untrusted codeFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST06
MEDIUM
npx invocation of non-well-known packageagents/workflow_debugger.md:34 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
File type combined with upload actionskills/output-dev-agent-class/SKILL.md:67 · File type combined with upload action — agent may exfiltrate local data filesFix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
npx invocation of non-well-known packageskills/output-credentials-init/SKILL.md:30 · npx invocation of non-well-known package — may execute untrusted codeFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST06
HIGH
Access to sensitive file pathsskills/output-credentials-env-vars/SKILL.md:102 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
npx invocation of non-well-known packageskills/output-credentials-env-vars/SKILL.md:78 · npx invocation of non-well-known package — may execute untrusted codeFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-credentials-edit/SKILL.md:25 · npx invocation of non-well-known package — may execute untrusted codeFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-dev-create-skeleton/SKILL.md:23 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
File type combined with upload actionskills/output-build-workflow/SKILL.md:257 · File type combined with upload action — agent may exfiltrate local data filesFix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
npx invocation of non-well-known packageagents/workflow_planner.md:253 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-debug-workflow/SKILL.md:73 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-credentials-init/SKILL.md:26 · npx invocation of non-well-known package — may execute untrusted codeFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-debug-workflow/SKILL.md:76 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-credentials-env-vars/SKILL.md:77 · npx invocation of non-well-known package — may execute untrusted codeFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST06
MEDIUM
npx invocation of non-well-known packageagents/workflow_debugger.md:35 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
CRITICAL
Fake instruction boundary tagskills/output-eval-judge-prompt/SKILL.md:133 · Fake instruction boundary tagFix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST01
CRITICAL
Fake instruction boundary tagskills/output-eval-judge-prompt/SKILL.md:92 · Fake instruction boundary tagFix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST01
MEDIUM
npx invocation of non-well-known packageagents/workflow_debugger.md:36 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-dev-scenario-file/SKILL.md:149 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
HIGH
Coercive compliance languageskills/output-dev-prompt-file/SKILL.md:301 · Coercive compliance languageFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01
MEDIUM
npx invocation of non-well-known packageagents/workflow_planner.md:257 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-dev-create-skeleton/SKILL.md:236 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-debug-workflow/SKILL.md:70 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
CRITICAL
Fake instruction boundary tagskills/output-meta-project-context/SKILL.md:375 · Fake instruction boundary tagFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01
MEDIUM
File type combined with upload actionskills/output-dev-cost-hooks/SKILL.md:43 · File type combined with upload action — agent may exfiltrate local data filesFix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
npx invocation of non-well-known packageskills/output-error-http-client/SKILL.md:341 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-error-direct-io/SKILL.md:233 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-dev-workflow-cost/SKILL.md:66 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-eval-validate-judge/SKILL.md:92 · npx invocation of non-well-known package — may execute untrusted codeFix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-error-nondeterminism/SKILL.md:244 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-dev-workflow-cost/SKILL.md:34 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-services-check/SKILL.md:68 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-dev-scenario-file/SKILL.md:152 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-eval-dataset-design/SKILL.md:232 · npx invocation of non-well-known package — may execute untrusted codeFix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-eval-dataset-design/SKILL.md:181 · npx invocation of non-well-known package — may execute untrusted codeFix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-eval-validate-judge/SKILL.md:206 · npx invocation of non-well-known package — may execute untrusted codeFix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-services-check/SKILL.md:90 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-eval-error-analysis/SKILL.md:42 · npx invocation of non-well-known package — may execute untrusted codeFix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-plan-workflow/SKILL.md:246 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
File type combined with upload actionskills/output-error-missing-schemas/SKILL.md:248 · File type combined with upload action — agent may exfiltrate local data filesFix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
npx invocation of non-well-known packageskills/output-meta-pre-flight/SKILL.md:27 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-error-zod-import/SKILL.md:148 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-eval-validate-judge/SKILL.md:174 · npx invocation of non-well-known package — may execute untrusted codeFix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST06
MEDIUM
File type combined with upload actionskills/output-migrate/SKILL.md:75 · File type combined with upload action — agent may exfiltrate local data filesFix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
npx invocation of non-well-known packageskills/output-meta-project-context/SKILL.md:211 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
File type combined with upload actionskills/output-migrate/SKILL.md:76 · File type combined with upload action — agent may exfiltrate local data filesFix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
npx invocation of non-well-known packageskills/output-eval-dataset-design/SKILL.md:275 · npx invocation of non-well-known package — may execute untrusted codeFix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-eval-dataset-design/SKILL.md:138 · npx invocation of non-well-known package — may execute untrusted codeFix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-meta-project-context/SKILL.md:213 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-eval-validate-judge/SKILL.md:81 · npx invocation of non-well-known package — may execute untrusted codeFix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-eval-error-analysis/SKILL.md:30 · npx invocation of non-well-known package — may execute untrusted codeFix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-eval-error-analysis/SKILL.md:53 · npx invocation of non-well-known package — may execute untrusted codeFix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-eval-error-analysis/SKILL.md:56 · npx invocation of non-well-known package — may execute untrusted codeFix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-error-http-client/SKILL.md:276 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-error-nondeterminism/SKILL.md:241 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-dev-workflow-cost/SKILL.md:47 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-error-direct-io/SKILL.md:234 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-eval-error-analysis/SKILL.md:33 · npx invocation of non-well-known package — may execute untrusted codeFix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-services-check/SKILL.md:58 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-eval-validate-judge/SKILL.md:74 · npx invocation of non-well-known package — may execute untrusted codeFix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-dev-scenario-file/SKILL.md:162 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-dev-scenario-file/SKILL.md:341 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-error-nondeterminism/SKILL.md:219 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-error-missing-schemas/SKILL.md:259 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-services-check/SKILL.md:73 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-dev-workflow-cost/SKILL.md:42 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-services-check/SKILL.md:74 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-dev-scenario-file/SKILL.md:159 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-error-http-client/SKILL.md:340 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-meta-project-context/SKILL.md:205 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-workflow-list/SKILL.md:26 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-error-http-client/SKILL.md:272 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-eval-dataset-design/SKILL.md:142 · npx invocation of non-well-known package — may execute untrusted codeFix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-meta-project-context/SKILL.md:208 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-dev-workflow-cost/SKILL.md:61 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-meta-project-context/SKILL.md:212 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-workflow-status/SKILL.md:25 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-workflow-runs-list/SKILL.md:83 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-workflow-trace/SKILL.md:33 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-workflow-run/SKILL.md:55 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-workflow-result/SKILL.md:25 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-workflow-trace/SKILL.md:99 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-workflow-run/SKILL.md:47 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-workflow-run/SKILL.md:34 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-workflow-result/SKILL.md:32 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-workflow-start/SKILL.md:35 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-workflow-result/SKILL.md:42 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-workflow-status/SKILL.md:23 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-workflow-run/SKILL.md:23 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-workflow-start/SKILL.md:55 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-workflow-status/SKILL.md:24 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-workflow-status/SKILL.md:32 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-workflow-runs-list/SKILL.md:42 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-workflow-reset/SKILL.md:34 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-workflow-result/SKILL.md:11 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-workflow-stop/SKILL.md:51 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-workflow-start/SKILL.md:47 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-workflow-list/SKILL.md:95 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-workflow-runs-list/SKILL.md:26 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-workflow-trace/SKILL.md:28 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-workflow-stop/SKILL.md:59 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-workflow-reset/SKILL.md:35 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-workflow-list/SKILL.md:70 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-workflow-list/SKILL.md:84 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-workflow-list/SKILL.md:88 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-workflow-runs-list/SKILL.md:86 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-workflow-stop/SKILL.md:25 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-workflow-reset/SKILL.md:24 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-workflow-status/SKILL.md:35 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-workflow-start/SKILL.md:34 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-workflow-trace/SKILL.md:119 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-workflow-runs-list/SKILL.md:50 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-workflow-stop/SKILL.md:55 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-workflow-run/SKILL.md:35 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-workflow-reset/SKILL.md:50 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-workflow-stop/SKILL.md:33 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-workflow-start/SKILL.md:23 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-workflow-result/SKILL.md:45 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-workflow-reset/SKILL.md:26 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/output-workflow-trace/SKILL.md:102 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06

What would make this Verified

12 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%
  1. Unclaimed publisher≈ +8 on the totalClaim growthxai: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
  2. Access to sensitive file paths≈ +4 on the totalStop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
  3. npx invocation of non-well-known package≈ +2 on the totalPin versions and sources; vendor anything fetched at install time.
  4. File type combined with upload action≈ +2 on the totalRemove the call, or declare the host in frontmatter and explain in the README what is sent and why.
Publish a new version to Claude Code plugins, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim growthxai