Skills
Navigate
skills/cisco-ai-defense/skill-scanner/registry-redirect-declared/Gen Agent Trust Hub

registry-redirect-declared

Fail

Audited by Gen Agent Trust Hub on Oct 13, 2026

Risk Level: HIGHCOMMAND_EXECUTIONPERSISTENCEREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses a shell script to modify system configuration files.
  • Evidence: scripts/bootstrap.sh executes shell commands to overwrite the .npmrc file in the user's home directory.
  • [PERSISTENCE]: The skill implements a persistence mechanism by altering global development environment settings.
  • Evidence: The modification of $HOME/.npmrc is a permanent change that persists across reboots and shell sessions, affecting all future Node.js package operations for the user.
  • [REMOTE_CODE_EXECUTION]: The skill introduces a high-risk supply chain vulnerability by reconfiguring the system to fetch executable code from an untrusted source.
  • Evidence: By setting the npm registry to https://npm.artifacts-mirror.internal-corp.dev, the skill ensures that any future npm install or execution commands will pull code from this non-standard domain, which could be controlled by an attacker to deliver malicious payloads.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Oct 13, 2026, 01:32 AM