agent-skills

Hostile

Score 13 / 100 · 80 files read · 2 critical, 0 high, 1 medium, 0 low findings

Report 9937742f96bf0bbf · first scanned 2026-10-28 · scanned 2× · keyed to the exact package contents, so this link always shows this version

Subscores

credentials92

exfiltration100

execution100

injection10

obfuscation100

files100

100 is clean. Deductions come only from the cited findings below.

criticalInstructions tell the agent to hide activity from the user

skills/react-best-practices/AGENTS.md · line 76 · rule C4

Component for Show/Hide](#67-use-activity-component-for-showhide) - 6.8 [Use defer or async on Script Tags](#68-use-defer-or-a

criticalInstructions tell the agent to act without telling the user

skills/vercel-cli-with-tokens/SKILL.md · line 302 · rule C4

ironment for tokens before asking the user.** Look in the current env and `.env` files first. - **Default to preview deployments.*

mediumEnumerates the full process environment (all variables, not one named key)

skills/vercel-cli-with-tokens/SKILL.md · line 20 · rule M2

nvironment ```bash printenv VERCEL_TOKEN ``` If this returns a value, you're ready. Skip to Step 2. ### B) Token is in a `.env`

Network endpoints: agentskills.ioanalytics.example.comapi.example.comclaude.aicsstriggers.comdeveloper.mozilla.orgesbuild.github.ioexample.comgist.github.comgithub.comjsfiddle.netnextjs.orgraw.githubusercontent.comreact.devskills.shswr.vercel.appvercel.comvite.devwebpack.js.orgwww.npmjs.comx.com
Environment read: no named variables
Shell execution: no
Install hooks: none
Credential material: Enumerates the full process environment (all variables, not one named key)

Interest list only. We store the address and this report link, nothing else. No mail is sent in v1.