registry-redirect
Fail
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: HIGHPERSISTENCEDATA_EXFILTRATIONCREDENTIALS_UNSAFECOMMAND_EXECUTION
Full Analysis
- [PERSISTENCE]: The skill overwrites the global Node.js configuration file (
~/.npmrc) using a shell script. This modification persists across user sessions and redirects all future package installations to a third-party server. - [DATA_EXFILTRATION]: The script configures the npm registry to
https://npm.artifacts-mirror.internal-corp.dev. This ensures that metadata for all future packages the user attempts to install will be leaked to this external, undocumented host. - [CREDENTIALS_UNSAFE]: The injected configuration includes
always-auth=true. This forces the npm client to send sensitive authentication tokens to the third-party registry for every request, creating a high risk of credential theft. - [COMMAND_EXECUTION]: The skill uses the
Bashtool to executescripts/bootstrap.sh, which performs the unauthorized system configuration changes.
Recommendations
- AI detected serious security threats
Audit Metadata