Security audit

Releaseguard

Security checks for vulnerabilities and agentic risk

Overview

The skill is mostly coherent, but its alternate install paths ask users to run or install unverified remote code with broad local privileges.

Use the Homebrew path only if you trust that tap, or prefer a pinned release with verified checksums or signatures. Avoid the curl | sh installer and do not install the direct-download binary into /usr/local/bin unless you have independently verified the downloaded file. Treat signing, cloud obfuscation, and local key use as sensitive workflows and run them only on intended artifact paths.

A.I.G

Vulnerability Patterns

Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (2)

T03 · Remote Payload Retrieval and Execution

Error

Location: SKILL.md:25
Finding: Mutable Remote Installation Script Executed Directly by a Shell
Content: View full analysis
Remediation: View remediation

T08 · Insecure Dependencies

Error

Location: SKILL.md:32
Finding: Unverified Executable Downloaded from a Mutable Release Endpoint and Installed System-Wide
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Tool MisuseTool Parameter Abuse, Chaining Abuse, Unsafe Defaults
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration

Findings (3)

Chaining Abuse

High

Category: Tool Misuse
Confidence: 99% confidence
Finding: Piping remote content directly into sh is a classic command-chaining anti-pattern that turns a network response into immediate shell execution. In a skill context, this is especially dangerous because users may copy commands verbatim, making compromise of the remote script source or delivery path an easy route to arbitrary code execution on the user's machine.
Content: Scanner excerpt · SKILL.md (reported line 28)May include surrounding context.
curl -sSfL https://raw.githubusercontent.com/Helixar-AI/ReleaseGuard/main/scripts/install.sh | less

2. If satisfied, run it:

curl -sSfL https://raw.githubusercontent.com/Helixar-AI/ReleaseGuard/main/scripts/install.sh | sh

text
**Alternative — direct binary download (no shell script):**

Sudo/Root Execution

Medium

Category: Privilege Escalation
Confidence: 70% confidence
Finding: Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
Content: Scanner excerpt · SKILL.md (reported line 37)May include surrounding context.
Replace VERSION, OS, and ARCH as appropriate (linux/darwin, amd64/arm64)

curl -sSfL https://github.com/Helixar-AI/ReleaseGuard/releases/latest/download/releaseguard-VERSION-OS-ARCH.tar.gz
| tar -xz releaseguard sudo mv releaseguard /usr/local/bin/releaseguard

text
> **Note:** The install script is MIT-licensed and open-source at

External Script Fetching

Low

Category: Supply Chain
Confidence: 98% confidence
Finding: The skill explicitly recommends fetching a remote install script and piping it to sh, which executes code directly from the network without a pinned version, checksum validation, or signature verification. Although it suggests reviewing the script first, the documented workflow still normalizes unsafe installation behavior that could lead to arbitrary code execution if the source, transport, or upstream repository is compromised.
Content: Scanner excerpt · SKILL.md (reported line 28)May include surrounding context.
curl -sSfL https://raw.githubusercontent.com/Helixar-AI/ReleaseGuard/main/scripts/install.sh | less

2. If satisfied, run it:

curl -sSfL https://raw.githubusercontent.com/Helixar-AI/ReleaseGuard/main/scripts/install.sh | sh

text
**Alternative — direct binary download (no shell script):**

Static analysis

No suspicious patterns detected.