npm skill-port-cli @0.6.0

score

0.71 high

flagged 2026-07-24 09:58

signals by category

content 1 topology 1 enrichment 1

maintainers added: —

package profile →

amplifiers co-occurring signal pairs that lift the final score

typosquat + new_install_script: typosquat shape with active payload or stub-rush surface (+0.15)

Signals fired

signal	weight	rationale
content
new_install_script	1.0	first time ['postinstall'] present
topology
typosquat	1.0	combosquat of 'skill'
enrichment
repo_too_new_for_version_history	0.7	claimed repo created 20d ago but package has 10 versions (expect >= 60d for that history)

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "kanelogger"
  ],
  "versions": 9
}

Evidence (package doc at flag time)

{
  "dependencies_count": 2,
  "dist": {
    "integrity": "sha512-ssDcEKXEogQKVqEWS8X0CiwKQyciWqIDfRzBcrgEnJ/hi2q+lf8gyk2bu9GbQZH5cPOR2j1DUgjsclxu83Qnvg==",
    "tarball": "https://registry.npmjs.org/skill-port-cli/-/skill-port-cli-0.6.0.tgz",
    "unpackedSize": 299555
  },
  "dist-tags": {
    "latest": "0.6.0"
  },
  "latest_version": "0.6.0",
  "maintainers": [
    {
      "email": "741180788@qq.com",
      "name": "kanelogger"
    }
  ],
  "num_versions": 10,
  "repository": {
    "type": "git",
    "url": "git+https://github.com/kanelogger/SkillPort.git"
  },
  "scripts": {
    "build": "tsc -p tsconfig.json",
    "desktop:build": "npm run build && npm run package --workspace skill-port-desktop",
    "desktop:dev": "npm run build && npm run start --workspace skill-port-desktop",
    "desktop:e2e": "npm run build && npm run e2e --workspace skill-port-desktop",
    "desktop:make": "npm run build && npm run make --workspace skill-port-desktop",
    "desktop:test": "npm run build && npm run test --workspace skill-port-desktop",
    "desktop:typecheck": "npm run build && npm run typecheck --workspace skill-port-desktop",
    "lint": "eslint src tests scripts apps/desktop/src apps/desktop/tests apps/desktop/*.ts",
    "postinstall": "node scripts/lifecycle/postinstall.mjs",
    "prepack": "npm run build",
    "preuninstall": "node scripts/lifecycle/preuninstall.mjs",
    "release": "node scripts/release.mjs",
    "release:desktop": "node scripts/release-desktop.mjs",
    "smoke:published": "node scripts/smoke/published-install.mjs",
    "test": "npm run build && node --test \"tests/**/*.test.js\"",
    "test:discovery": "npm run build && node scripts/smoke/agent-discovery.mjs",
    "test:package": "node scripts/smoke/npm-install.mjs",
    "test:platform": "npm run build && node --test tests/core-loop.test.js tests/link-adapter.test.js tests/target-conflict.test.js tests/tool-registry.test.js",
    "typecheck": "tsc -p tsconfig.json --noEmit"
  },
  "signal_details": {
    "_amplifiers": [
      "typosquat + new_install_script: typosquat shape with active payload or stub-rush surface (+0.15)"
    ],
    "new_install_script": "first time ['postinstall'] present",
    "repo_too_new_for_version_history": "claimed repo created 20d ago but package has 10 versions (expect >= 60d for that history)",
    "typosquat": "combosquat of 'skill'"
  },
  "time": {
    "created": "2026-07-09T14:25:50.732Z",
    "modified": "2026-07-24T14:58:07.531Z"
  }
}