Skip to content
Open-Source Registry

pypi / skills-analyzer / 0.1.0

skills-analyzer 0.1.0

bitbison: flagged, behavior flagged, dependencies clean, posture not checked, pipeline clean, 1 of 1 jobs captured RisknoneVulnsnone
processes
408
operations
22K
packages
0
compiler runs
3
connections
1
build time
13s
job time
13s
capture
182 KB
records
33K
bytes / record
5.6
run aa9c8ade-61fb-4209-91e1-93750dc1d930 · built 2026-10-28 · complete View on PyPI
Reviewed by Bitbison: maliciousskills-analyzer 0.1.1 depends on is-it-ai==0.1.1 and calls its verify() from its own command. That code posts an environment and organization fingerprint to a Cloud Run endpoint and runs a file the server returns on Windows and macOS. The other releases are covers from the same publisher.

Artifact

archive · retained · retained · graph v2
1

Checks

12 of 12 clear
Build behavior✓✓✓✓✓✓✓✓✓
Supply chain✓✓
Pipeline✓

Detections

0

No detections

No abnormal activity detected across 22K flows.

Network

1 peers
  • files.pythonhosted.org:8080 the package manager · python3.14 (skills-analyzer) via Package registries profile (pip → files.pythonhosted.org) ecosystem
Versions3RiskVulnsPublished
0.1.2did not build1d ago
0.1.1mediumnone1d ago
0.1.0nonenone3d ago

Raw data

capture
182 KB
records
32,555
bytes per record
5.6

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-import success · Generated 2026-10-28 · run aa9c8ade-61fb-4209-91e1-93750dc1d930

analysis 0.1.0 · 2026-10-28 · d1e7d8e · graph v2

skills-analyzer 0.1.1 pulls in is-it-ai 0.1.1, which sends a machine fingerprint out and runs the file it returns

maliciousCovers 0.1.0, 0.1.1 and 0.1.2Reviewed by BitbisonUpdated 2026-11-01

skills-analyzer 0.1.1 depends on is-it-ai==0.1.1 and calls its verify() from its own command. That code posts an environment and organization fingerprint to a Cloud Run endpoint and runs a file the server returns on Windows and macOS. The other releases are covers from the same publisher.

What it does

skills-analyzer 0.1.1 declares is-it-ai==0.1.1 as a dependency. Its skills-analyzer command calls verify() first thing after parsing its arguments, before any of its own work, on every run. Running the command with no arguments connects to the endpoint.

is-it-ai 0.1.1 presents itself as a library that detects AI agent environments. Its verify() collects the operating system, the Claude Code process and entrypoint variables, whether managed settings are present, and on Windows and macOS a fingerprint: hashes of a corporate MCP gateway certificate and of an MDM-assigned preferences file, which identify the organization a machine belongs to. It posts this to https://cdn-9zp0pi12ck0dmfig-3ozmpyh7ja-uc.a.run.app/v1/session/info. When the reply names a URL and a destination, it downloads that file; on Windows it opens it and on macOS it makes it executable and starts it detached. The endpoint and a list of AI tool, editor and model runner paths on Windows and macOS are bundled in is_it_ai/config/service.json.

The other releases of skills-analyzer do not pin is-it-ai; they are covers uploaded by the same publisher.

Timeline

  • First release on PyPI: 2026-10-28 22:24 UTC.
  • skills-analyzer 0.1.1, the release carrying the code, uploaded 2026-10-31 00:39 UTC.
  • Reported to the OpenSSF malicious packages database as MAL-2026-18427: 2026-10-31 12:55 UTC, 12 hours after that release was published.
  • Every release was still available on PyPI, none yanked, when this review was written.

Indicators

hosts
cdn-9zp0pi12ck0dmfig-3ozmpyh7ja-uc.a.run.app
requests
https://cdn-9zp0pi12ck0dmfig-3ozmpyh7ja-uc.a.run.app/v1/session/infohttps://cdn-9zp0pi12ck0dmfig-3ozmpyh7ja-uc.a.run.app/v1/status
packages
pypi:is-it-ai==0.1.1

Examined

0.1.1
sha256:1821b52563f74d83c3ecf8b73416a246a7384ab7fb716ce31e65a8fcc467a2f9

Links