Skills/skills.sh/impeccable

impeccable@4.7.0

BLOCKED

Publisher claims: "Use when the user wants to design, redesign, shape, critique, audit, polish, simplify, harden, animate, or otherwise improve a frontend interface: websites, landing pages, dashboards, product UI, components, forms, settings, onboarding, empty states, and native iOS or Android screens. Handles UX review, hierarchy, layout, typography, color, motion, UX copy, accessibility, responsive behavior, edge cases, and capturing or documenting design systems (DESIGN.md, tokens). Also for making bland UI bolder, loud UI quieter, or ambitious visual effects. Not for backend-only or non-UI tasks." Observed in sandbox: static analysis only — behavior not yet observed.

Registry skills.shPublisher pbakaus · joined 4 days agoInstalls 361KLast detonated 4d ago
WatchDispute verdict

Is [email protected] safe to install?

KillerSkills analysed it statically (a sandbox run is pending) on 2026-10-22 and scored it 30/100 (Blocked). Do not install it: the sandbox observed behaviour consistent with credential theft, exfiltration or persistence. Notable findings: Outbound HTTP to raw IP address; npx invocation of non-well-known package; Process kill command. Summary: static analysis only — behavior not yet observed.

Behavior trace

Queued for honeypot run · static analysis only
t+CategoryObserved action

This version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.

Static findings

MEDIUM
File type combined with upload actionscripts/modern-screenshot.umd.js:6 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionreference/document.md:89 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionreference/document.md:345 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionreference/region-map.md:7 · File type combined with upload action — agent may exfiltrate local data files
AST07
HIGH
Outbound HTTP to raw IP addressreference/generate.md:49 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
npx invocation of non-well-known packageSKILL.md:7 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Process kill commandreference/live.md:313 · Process kill command — agent can terminate processes
AST05
MEDIUM
File type combined with upload actionreference/new-work.md:53 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionreference/live.md:120 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionreference/degraded/asset-producer.md:34 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionreference/new-work.md:111 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
URL using raw IP addressreference/generate.md:49 · URL using raw IP address — may bypass domain-based filtering
AST07
CRITICAL
Access to sensitive file pathsreference/live-setup.md:92 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
npx invocation of non-well-known packagereference/doctor.md:9 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Process kill commandreference/audit.md:15 · Process kill command — agent can terminate processes
AST05
MEDIUM
File type combined with upload actionreference/visualize.md:43 · File type combined with upload action — agent may exfiltrate local data files
AST07
CRITICAL
HTML comment carrying imperative instructions to the agentreference/document.md:369 · HTML comment carrying imperative instructions to the agent
AST01
MEDIUM
File type combined with upload actionreference/component-review.md:11 · File type combined with upload action — agent may exfiltrate local data files
AST07
CRITICAL
Fake instruction boundary tagreference/visualize.md:43 · Fake instruction boundary tag
AST01
HIGH
Authorization escalation languagereference/hooks.md:11 · Authorization escalation language
AST01
MEDIUM
File type combined with upload actionreference/live.md:14 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionreference/new-work.md:142 · File type combined with upload action — agent may exfiltrate local data files
AST07
HIGH
Auto-update or dynamic fetch configurationreference/live-setup.md:41 · Auto-update or dynamic fetch configuration — agent may load new code at runtime
AST06
HIGH
Process kill commandreference/generate.md:96 · Process kill command — agent can terminate processes
AST05
MEDIUM
File type combined with upload actionscripts/modern-screenshot.umd.js:7 · File type combined with upload action — agent may exfiltrate local data files
AST07
CRITICAL
Access to sensitive file pathsreference/live-setup.md:80 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05