lythoskill-curator
Indexes and catalogs skills from local directories, providing structured data for querying without modifying or recommending skills.
Install this skill
Security score
The lythoskill-curator skill was audited on Jun 15, 2026 and we found 12 security issues across 4 threat categories, including 1 critical. Review the findings below before installing.
Categories Tested
Security Issues
Piping content to bash shell
| 159 | > - Linux: `curl -fsSL https://cli.github.com/install.sh | bash` |
Curl to non-GitHub URL
| 159 | > - Linux: `curl -fsSL https://cli.github.com/install.sh | bash` |
Access to hidden dotfiles in home directory
| 29 | - ~/.agents/skill-repos/.lythoskill-curator/ |
Access to hidden dotfiles in home directory
| 175 | # Defaults: POOL_PATH = ~/.agents/skill-repos |
Access to hidden dotfiles in home directory
| 177 | bunx @lythos/[email protected] ~/.agents/skill-repos --output /tmp/my-index/ |
Access to hidden dotfiles in home directory
| 295 | 2. curator add github.com/<owner>/<repo> --pool ~/.agents/skill-repos |
Access to hidden dotfiles in home directory
| 335 | bunx @lythos/[email protected] add github.com/owner/repo --pool ~/.agents/skill-repos |
Access to hidden dotfiles in home directory
| 336 | bunx @lythos/[email protected] add github.com/owner/repo --pool ~/.agents/skill-repos --dry-run |
Access to hidden dotfiles in home directory
| 337 | bunx @lythos/[email protected] add github.com/owner/repo --pool ~/.agents/skill-repos \ |
Access to hidden dotfiles in home directory
| 339 | bunx @lythos/[email protected] add github.com/owner/repo --pool ~/.agents/skill-repos \ |
External URL reference
| 159 | > - Linux: `curl -fsSL https://cli.github.com/install.sh | bash` |
External URL reference
| 193 | --qa '{"source_type":"hub/agentskill.sh","source_url":"https://...","signal_type":"securityScore","signal_value":95}' |