vskill 1.2.6 → 1.2.7

package/README.md

@@ -55,7 +55,7 @@ And the ones that aren't malicious often *don't even improve the model* — they
 
 vskill is built around three problems:
 
-- **Trust** — every install runs a 3-tier scan (52 patterns → blocklist → LLM intent). No `--skip-scan`.
+- **Trust** — every install runs a 3-tier scan (58 patterns + hidden-content checks → blocklist → LLM intent). No `--skip-scan`.
 - **Proof** — Skill Studio runs A/B evals so you can *show* a skill makes a model better, not assume it.
 - **Reach** — one skill, 53 agents (Claude Code, Cursor, Copilot, Codex, Windsurf, Zed, Gemini CLI, Ollama, …).
 
@@ -87,7 +87,7 @@ CORS-free by design: the browser only ever talks to localhost. The server proxie
   ┌──────────┐     ┌──────────┐     ┌──────────┐     ┌──────────┐
   │  Source  │────>│   Scan   │────>│  Verify  │────>│ Install  │
   │          │     │          │     │          │     │          │
-  │ GitHub   │     │ 52 rules │     │ LLM      │     │ Pin SHA  │
+  │ GitHub   │     │ 58 rules │     │ LLM      │     │ Pin SHA  │
   │ Registry │     │ Blocklist│     │ intent   │     │ Lock ver │
   │ Local    │     │ Patterns │     │ analysis │     │ Symlink  │
   └──────────┘     └──────────┘     └──────────┘     └──────────┘

package/agents.json

@@ -1,6 +1,6 @@
 {
   "version": 1,
-  "generatedAt": "2026-10-11T11:51:33.859Z",
+  "generatedAt": "2026-10-11T14:38:20.036Z",
   "agentPrefixes": [
     ".adal",
     ".agent",

package/dist/audit/fix-suggestions.js

@@ -44,6 +44,12 @@ export const FIX_SUGGESTIONS = {
     "CE-001": "Replace eval() with JSON.parse() for data or Function constructor for code; never eval user input",
     "CE-002": "Avoid new Function(); use explicit function definitions instead",
     "CE-003": "Avoid dynamic imports with user-controlled paths; use a module allowlist",
+    "CE-004": "Never unpickle or exec decoded data; use a safe format such as JSON and import modules statically",
+    "CI-009": "Call subprocess with an argument list and shell=False instead of os.system/os.popen or shell=True",
+    "CI-010": "Avoid Invoke-Expression and encoded PowerShell commands; run reviewed scripts with explicit parameters",
+    "CI-011": "Download the PowerShell script, review it, then run it by path instead of piping irm/iwr output into iex",
+    "NA-004": "Do not ask users to download and run external binaries or scripts as a prerequisite; ship reviewed code with the skill or name a package-manager install",
+    "NA-005": "Do not distribute password-protected archives; publish contents that can be reviewed and scanned",
     // --- DCI-abuse patterns ---
     "DCI-001": "Remove DCI blocks that read credential files (~/.ssh/, ~/.aws/, .env); use a secrets manager instead",
     "DCI-002": "Remove DCI blocks that write to agent config files (CLAUDE.md, .claude/); legitimate skills do not modify agent configuration",

package/dist/audit/fix-suggestions.js.map

@@ -1 +1 @@
-{"version":3,"file":"fix-suggestions.js","sourceRoot":"","sources":["../../src/audit/fix-suggestions.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,0CAA0C;AAC1C,MAAM,CAAC,MAAM,eAAe,GAA2B;IACrD,sCAAsC;IACtC,QAAQ,EAAE,sGAAsG;IAChH,QAAQ,EAAE,gGAAgG;IAC1G,QAAQ,EAAE,uEAAuE;IACjF,QAAQ,EAAE,qFAAqF;IAC/F,QAAQ,EAAE,8FAA8F;IACxG,QAAQ,EAAE,0EAA0E;IACpF,QAAQ,EAAE,8FAA8F;IACxG,QAAQ,EAAE,+GAA+G;IACzH,QAAQ,EAAE,0FAA0F;IACpG,QAAQ,EAAE,gEAAgE;IAC1E,QAAQ,EAAE,yDAAyD;IACnE,QAAQ,EAAE,yEAAyE;IACnF,QAAQ,EAAE,gGAAgG;IAC1G,QAAQ,EAAE,sFAAsF;IAChG,QAAQ,EAAE,4EAA4E;IACtF,QAAQ,EAAE,wEAAwE;IAClF,QAAQ,EAAE,uEAAuE;IACjF,QAAQ,EAAE,8EAA8E;IACxF,QAAQ,EAAE,yFAAyF;IACnG,QAAQ,EAAE,2EAA2E;IACrF,QAAQ,EAAE,uFAAuF;IACjG,QAAQ,EAAE,kFAAkF;IAC5F,QAAQ,EAAE,qFAAqF;IAC/F,QAAQ,EAAE,wEAAwE;IAClF,QAAQ,EAAE,wFAAwF;IAClG,QAAQ,EAAE,wFAAwF;IAClG,QAAQ,EAAE,gEAAgE;IAC1E,QAAQ,EAAE,iFAAiF;IAC3F,QAAQ,EAAE,mFAAmF;IAC7F,QAAQ,EAAE,yFAAyF;IACnG,QAAQ,EAAE,iEAAiE;IAC3E,QAAQ,EAAE,2EAA2E;IACrF,QAAQ,EAAE,uFAAuF;IACjG,QAAQ,EAAE,0EAA0E;IACpF,QAAQ,EAAE,4FAA4F;IACtG,QAAQ,EAAE,mGAAmG;IAC7G,QAAQ,EAAE,iEAAiE;IAC3E,QAAQ,EAAE,0EAA0E;IAEpF,6BAA6B;IAC7B,SAAS,EAAE,sGAAsG;IACjH,SAAS,EAAE,+HAA+H;IAC1I,SAAS,EAAE,iHAAiH;IAC5H,SAAS,EAAE,kHAAkH;IAC7H,SAAS,EAAE,iHAAiH;IAC5H,SAAS,EAAE,8FAA8F;IACzG,SAAS,EAAE,kHAAkH;IAC7H,SAAS,EAAE,4GAA4G;IACvH,SAAS,EAAE,mHAAmH;IAC9H,SAAS,EAAE,kHAAkH;IAC7H,SAAS,EAAE,oGAAoG;IAC/G,SAAS,EAAE,2GAA2G;IACtH,SAAS,EAAE,wGAAwG;IACnH,SAAS,EAAE,gHAAgH;IAE3H,0CAA0C;IAC1C,UAAU,EAAE,yFAAyF;IACrG,UAAU,EAAE,gFAAgF;IAC5F,UAAU,EAAE,sFAAsF;IAClG,UAAU,EAAE,8EAA8E;IAC1F,UAAU,EAAE,oFAAoF;IAChG,SAAS,EAAE,gEAAgE;IAC3E,SAAS,EAAE,+EAA+E;IAC1F,QAAQ,EAAE,uFAAuF;IACjG,QAAQ,EAAE,6FAA6F;IACvG,QAAQ,EAAE,6FAA6F;IACvG,QAAQ,EAAE,6FAA6F;IACvG,SAAS,EAAE,kFAAkF;IAC7F,SAAS,EAAE,yFAAyF;IACpG,SAAS,EAAE,qFAAqF;IAChG,QAAQ,EAAE,sEAAsE;IAChF,QAAQ,EAAE,2EAA2E;IACrF,QAAQ,EAAE,4EAA4E;IACtF,QAAQ,EAAE,iGAAiG;IAC3G,QAAQ,EAAE,0EAA0E;IACpF,QAAQ,EAAE,6DAA6D;IACvE,QAAQ,EAAE,2EAA2E;CACtF,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,QAAwB,EACxB,GAAY;IAEZ,IAAI,CAAC,GAAG;QAAE,OAAO,QAAQ,CAAC;IAE1B,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACxB,MAAM,UAAU,GAAG,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,EAAE,GAAG,CAAC,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC;QAC5C,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"fix-suggestions.js","sourceRoot":"","sources":["../../src/audit/fix-suggestions.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,0CAA0C;AAC1C,MAAM,CAAC,MAAM,eAAe,GAA2B;IACrD,sCAAsC;IACtC,QAAQ,EAAE,sGAAsG;IAChH,QAAQ,EAAE,gGAAgG;IAC1G,QAAQ,EAAE,uEAAuE;IACjF,QAAQ,EAAE,qFAAqF;IAC/F,QAAQ,EAAE,8FAA8F;IACxG,QAAQ,EAAE,0EAA0E;IACpF,QAAQ,EAAE,8FAA8F;IACxG,QAAQ,EAAE,+GAA+G;IACzH,QAAQ,EAAE,0FAA0F;IACpG,QAAQ,EAAE,gEAAgE;IAC1E,QAAQ,EAAE,yDAAyD;IACnE,QAAQ,EAAE,yEAAyE;IACnF,QAAQ,EAAE,gGAAgG;IAC1G,QAAQ,EAAE,sFAAsF;IAChG,QAAQ,EAAE,4EAA4E;IACtF,QAAQ,EAAE,wEAAwE;IAClF,QAAQ,EAAE,uEAAuE;IACjF,QAAQ,EAAE,8EAA8E;IACxF,QAAQ,EAAE,yFAAyF;IACnG,QAAQ,EAAE,2EAA2E;IACrF,QAAQ,EAAE,uFAAuF;IACjG,QAAQ,EAAE,kFAAkF;IAC5F,QAAQ,EAAE,qFAAqF;IAC/F,QAAQ,EAAE,wEAAwE;IAClF,QAAQ,EAAE,wFAAwF;IAClG,QAAQ,EAAE,wFAAwF;IAClG,QAAQ,EAAE,gEAAgE;IAC1E,QAAQ,EAAE,iFAAiF;IAC3F,QAAQ,EAAE,mFAAmF;IAC7F,QAAQ,EAAE,yFAAyF;IACnG,QAAQ,EAAE,iEAAiE;IAC3E,QAAQ,EAAE,2EAA2E;IACrF,QAAQ,EAAE,uFAAuF;IACjG,QAAQ,EAAE,0EAA0E;IACpF,QAAQ,EAAE,4FAA4F;IACtG,QAAQ,EAAE,mGAAmG;IAC7G,QAAQ,EAAE,iEAAiE;IAC3E,QAAQ,EAAE,0EAA0E;IACpF,QAAQ,EAAE,mGAAmG;IAC7G,QAAQ,EAAE,mGAAmG;IAC7G,QAAQ,EAAE,wGAAwG;IAClH,QAAQ,EAAE,0GAA0G;IACpH,QAAQ,EAAE,0JAA0J;IACpK,QAAQ,EAAE,kGAAkG;IAE5G,6BAA6B;IAC7B,SAAS,EAAE,sGAAsG;IACjH,SAAS,EAAE,+HAA+H;IAC1I,SAAS,EAAE,iHAAiH;IAC5H,SAAS,EAAE,kHAAkH;IAC7H,SAAS,EAAE,iHAAiH;IAC5H,SAAS,EAAE,8FAA8F;IACzG,SAAS,EAAE,kHAAkH;IAC7H,SAAS,EAAE,4GAA4G;IACvH,SAAS,EAAE,mHAAmH;IAC9H,SAAS,EAAE,kHAAkH;IAC7H,SAAS,EAAE,oGAAoG;IAC/G,SAAS,EAAE,2GAA2G;IACtH,SAAS,EAAE,wGAAwG;IACnH,SAAS,EAAE,gHAAgH;IAE3H,0CAA0C;IAC1C,UAAU,EAAE,yFAAyF;IACrG,UAAU,EAAE,gFAAgF;IAC5F,UAAU,EAAE,sFAAsF;IAClG,UAAU,EAAE,8EAA8E;IAC1F,UAAU,EAAE,oFAAoF;IAChG,SAAS,EAAE,gEAAgE;IAC3E,SAAS,EAAE,+EAA+E;IAC1F,QAAQ,EAAE,uFAAuF;IACjG,QAAQ,EAAE,6FAA6F;IACvG,QAAQ,EAAE,6FAA6F;IACvG,QAAQ,EAAE,6FAA6F;IACvG,SAAS,EAAE,kFAAkF;IAC7F,SAAS,EAAE,yFAAyF;IACpG,SAAS,EAAE,qFAAqF;IAChG,QAAQ,EAAE,sEAAsE;IAChF,QAAQ,EAAE,2EAA2E;IACrF,QAAQ,EAAE,4EAA4E;IACtF,QAAQ,EAAE,iGAAiG;IAC3G,QAAQ,EAAE,0EAA0E;IACpF,QAAQ,EAAE,6DAA6D;IACvE,QAAQ,EAAE,2EAA2E;CACtF,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,QAAwB,EACxB,GAAY;IAEZ,IAAI,CAAC,GAAG;QAAE,OAAO,QAAQ,CAAC;IAE1B,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACxB,MAAM,UAAU,GAAG,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,EAAE,GAAG,CAAC,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC;QAC5C,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/commands/add.d.ts

@@ -73,4 +73,9 @@ export declare function enableAfterInstall(skillName: string, entry: {
  * @internal exported for unit tests; see `enableAfterInstall` note above.
  */
 export declare function rollbackInstall(skillName: string, agents: AgentDefinition[], opts: AddOptions): void;
+/**
+ * Collect all file contents from a plugin directory for security scanning.
+ * Concatenates content from all readable files.
+ */
+export declare function collectPluginContent(pluginDir: string): string;
 export declare function addCommand(source: string | undefined, opts: AddOptions): Promise<void>;

package/dist/commands/add.js

@@ -13,6 +13,7 @@ import { ensureLockfile, writeLockfile, readLockfile, removeSkillFromLock } from
 import { buildGitHubInstallLockEntry } from "./add-lockfile.js";
 import { prepareGitHubSkillBundle } from "./add-github-bundle.js";
 import { runTier1Scan } from "../scanner/index.js";
+import { isBinary } from "../scanner/repo-scanner.js";
 import { getAvailablePlugins, getPluginSource, getPluginVersion, hasPlugin, discoverUnregisteredPlugins } from "../marketplace/index.js";
 import { checkInstallSafety, checkLocalInstallSafety } from "../blocklist/blocklist.js";
 import { getSkill, searchSkills } from "../api/client.js";
@@ -1117,17 +1118,22 @@ function listPluginDirPlugins(basePath) {
  * Collect all file contents from a plugin directory for security scanning.
  * Concatenates content from all readable files.
  */
-function collectPluginContent(pluginDir) {
+export function collectPluginContent(pluginDir) {
     const files = readdirSync(pluginDir, { recursive: true });
     const parts = [];
     for (const file of files) {
         const fullPath = join(pluginDir, file);
         try {
-            const content = readFileSync(fullPath, "utf-8");
-            parts.push(`--- ${file} ---\n${content}`);
+            const buffer = readFileSync(fullPath);
+            // Images and other binaries decode to junk that looks like hidden
+            // Unicode (a GIF header can spell tag characters); they are not text
+            // an agent reads, so they are not scanned as text.
+            if (isBinary(buffer))
+                continue;
+            parts.push(`--- ${file} ---\n${buffer.toString("utf-8")}`);
         }
         catch {
-            // Skip unreadable files (directories, binary, etc.)
+            // Skip unreadable files (directories, etc.)
         }
     }
     return parts.join("\n");