Skip to main content

lythoskill-arena

Facilitates controlled-variable testing for AI skills and deck configurations, enabling effective A/B comparisons and performance evaluations.

Install this skill

or
93/100

Security score

The lythoskill-arena skill was audited on Jul 31, 2026 and we found 7 security issues across 1 threat category. Review the findings below before installing.

Categories Tested

Security Issues

low line 127

Command substitution pattern

SourceSKILL.md
125 bunx @lythos/[email protected] prepare-workdir \
126 --deck ./test-deck.toml \
127 --out /tmp/arena-$(date +%Y%m%d-%H%M%S) \
128 --brief "Execute the target skill's core workflow"
129 ```
low line 157

Command substitution pattern

SourceSKILL.md
155bunx @lythos/[email protected] prepare-workdir \
156 --deck ./side-a.toml \
157 --out /tmp/arena-$(date +%Y%m%d-%H%M%S)-side-a \
158 --brief "task description" \
159 --dry-run
low line 164

Command substitution pattern

SourceSKILL.md
162bunx @lythos/[email protected] prepare-workdir \
163 --deck ./side-a.toml \
164 --out /tmp/arena-$(date +%Y%m%d-%H%M%S)-side-a \
165 --brief "task description"
166```
low line 214

Command substitution pattern

SourceSKILL.md
212# Plan-first
213bunx @lythos/[email protected] archive \
214 --from /tmp/arena-$(date +%Y%m%d-%H%M%S) \
215 --to playground/arena-$(date +%Y%m%d-%H%M%S) \
216 --sides side-a,side-b \
low line 215

Command substitution pattern

SourceSKILL.md
213bunx @lythos/[email protected] archive \
214 --from /tmp/arena-$(date +%Y%m%d-%H%M%S) \
215 --to playground/arena-$(date +%Y%m%d-%H%M%S) \
216 --sides side-a,side-b \
217 --report ./report.md \
low line 222

Command substitution pattern

SourceSKILL.md
220# Execute (same minus --dry-run)
221bunx @lythos/[email protected] archive \
222 --from /tmp/arena-$(date +%Y%m%d-%H%M%S) \
223 --to playground/arena-$(date +%Y%m%d-%H%M%S) \
224 --sides side-a,side-b \
low line 223

Command substitution pattern

SourceSKILL.md
221bunx @lythos/[email protected] archive \
222 --from /tmp/arena-$(date +%Y%m%d-%H%M%S) \
223 --to playground/arena-$(date +%Y%m%d-%H%M%S) \
224 --sides side-a,side-b \
225 --report ./report.md
Scanned on Jul 31, 2026
View Security Dashboard
Installation guide →