Sato Hub
← Skills

chainskills.sh · simota

29 installs

"Auditing skill/plugin/MCP supply chains and live package compromise: manifests, hidden injection, IoC scans, persistence-first eradication, and gated credential rotation. Not for app SAST (Sentinel)."

Pipes a remote script into a shellExecutes fetched or decoded codeGenerates or handles private keysReads secret paths (~/.ssh, .env …)Schedules itself to run repeatedly
Hosts contacted: example.comblog.flatt.techtanstack.comregistry.npmjs.org
Credentials it expects: GITHUB_TOKENOPENAI_API_KEYANTHROPIC_API_KEY
Evidence lines
  • pipes_remote_to_shell — reference/audit-decision-matrix.md: | `curl ... | bash`, `wget ... | sh`, `eval $(...)` in bundled script | `P0` | `REJECT` | triage |
  • pipes_remote_to_shell — reference/bundled-artifact-review.md: | `curl ... \| bash` / `curl ... \| sh` | `P0` | `curl https://example.com/install.sh \| bash` |
  • pipes_remote_to_shell — reference/bundled-artifact-review.md: | `wget -qO- ... \| sh` | `P0` | unpinned remote execution |
  • pipes_remote_to_shell — reference/bundled-artifact-review.md: excerpt: "curl https://example.com/install.sh | bash"
  • pipes_remote_to_shell — reference/intake-checklist.md: -curl https://example.com/install.sh | bash
  • executes_fetched_code — reference/audit-decision-matrix.md: | `curl ... | bash`, `wget ... | sh`, `eval $(...)` in bundled script | `P0` | `REJECT` | triage |
  • executes_fetched_code — reference/bundled-artifact-review.md: | `eval $(curl ...)` / `eval $(wget ...)` | `P0` | indirect remote exec |
  • executes_fetched_code — reference/bundled-artifact-review.md: | `base64 -d \| sh` / `base64 \| bash` | `P0` | hidden payload |
  • executes_fetched_code — reference/bundled-artifact-review.md: -e 'eval[[:space:]]*\$\([[:space:]]*(curl|wget)' \
  • executes_fetched_code — reference/bundled-artifact-review.md: | `exec(...)` / `eval(...)` with non-literal arg | `P0` | dynamic code execution |
  • generates_or_handles_keys — reference/supply-chain-malware-eradication.md: | 20 | Treat the compromised seed phrase as burned — never reuse |
  • generates_or_handles_keys — reference/supply-chain-malware-eradication.md: | Reuse wallet seed after "cleaning" the machine | Seed phrase is burned the moment it left the host | New wallet, always |
  • reads_secret_paths — reference/audit-decision-matrix.md: | `~/.ssh`, `~/.aws`, `~/.npmrc`, `~/.netrc` read without declaration | `P0` | `REJECT` | triage |
  • reads_secret_paths — reference/bundled-artifact-review.md: | `cat ~/.ssh/id_*`, `cat ~/.aws/credentials`, `cat ~/.netrc` | `P0` | credential exfil |
  • reads_secret_paths — reference/intake-checklist.md: - `~/.ssh/` (id_*, authorized_keys, known_hosts)
  • reads_secret_paths — reference/intake-checklist.md: - `~/.aws/credentials`, `~/.aws/config`
  • reads_secret_paths — reference/intake-checklist.md: - `~/.kube/config`
  • schedules_persistence — reference/bundled-artifact-review.md: | `cron`, `at`, `launchd`, `systemd --user` installs | `P1` | persistence |
  • schedules_persistence — reference/supply-chain-malware-eradication.md: launchctl unload ~/Library/LaunchAgents/com.user.gh-token-monitor.plist
  • schedules_persistence — reference/supply-chain-malware-eradication.md: launchctl bootout gui/$(id -u) ~/Library/LaunchAgents/com.user.gh-token-monitor.plist 2>/dev/null
  • schedules_persistence — reference/supply-chain-malware-eradication.md: ### Linux — cron / shell rc
  • schedules_persistence — reference/supply-chain-malware-eradication.md: If cron entries or `.bashrc` lines were matched, comment them out (do not delete yet — they're evidence). Use a single in-place edit guarded by backup:

Our disclosure is a static description of what the skill declares and does; it is not a safety verdict. Source record: www.skills.sh/simota/agent-skills/chain.

Install

npx skills add simota/agent-skills@chain

Copied from the registry's documented install form. Read the disclosure above first; it is the whole point of this page.

Observed record

3 weekly observations since 2026-09-07. Installs 25 → 29.

The skill's content changed 1 time(s): 2026-09-21. A changed SKILL.md is the security signal that matters — re-read it.

Cite this page

Sato Hub. "chain — skill disclosure on Sato Hub." Sato Hub, updated 2026-10-23, accessed 2026-10-23. https://satohub.ai/skills/skillssh%3Asimota%2Fagent-skills%2Fchain

Data last refreshed 2026-10-23; this page is rebuilt daily. Citations carry the date so a reader can tell which snapshot a claim came from. Catalog data is licensed CC-BY-4.0.