Skip to main content

lythoskill-arena

Facilitates controlled-variable testing for AI skills and deck configurations, enabling effective A/B comparisons and performance evaluations.

Install this skill

or
93/100

Security score

The lythoskill-arena skill was audited on Oct 31, 2026 and we found 7 security issues across 1 threat category. Review the findings below before installing.

Categories Tested

Security Issues

low line 134

Command substitution pattern

SourceSKILL.md
132 bunx @lythos/[email protected] prepare-workdir \
133 --deck ./test-deck.toml \
134 --out /tmp/arena-$(date +%Y%m%d-%H%M%S) \
135 --brief "Execute the target skill's core workflow"
136 ```
low line 164

Command substitution pattern

SourceSKILL.md
162bunx @lythos/[email protected] prepare-workdir \
163 --deck ./side-a.toml \
164 --out /tmp/arena-$(date +%Y%m%d-%H%M%S)-side-a \
165 --brief "task description" \
166 --dry-run
low line 171

Command substitution pattern

SourceSKILL.md
169bunx @lythos/[email protected] prepare-workdir \
170 --deck ./side-a.toml \
171 --out /tmp/arena-$(date +%Y%m%d-%H%M%S)-side-a \
172 --brief "task description"
173```
low line 232

Command substitution pattern

SourceSKILL.md
230# Plan-first
231bunx @lythos/[email protected] archive \
232 --from /tmp/arena-$(date +%Y%m%d-%H%M%S) \
233 --to playground/arena-$(date +%Y%m%d-%H%M%S) \
234 --sides side-a,side-b \
low line 233

Command substitution pattern

SourceSKILL.md
231bunx @lythos/[email protected] archive \
232 --from /tmp/arena-$(date +%Y%m%d-%H%M%S) \
233 --to playground/arena-$(date +%Y%m%d-%H%M%S) \
234 --sides side-a,side-b \
235 --report ./report.md \
low line 240

Command substitution pattern

SourceSKILL.md
238# Execute (same minus --dry-run)
239bunx @lythos/[email protected] archive \
240 --from /tmp/arena-$(date +%Y%m%d-%H%M%S) \
241 --to playground/arena-$(date +%Y%m%d-%H%M%S) \
242 --sides side-a,side-b \
low line 241

Command substitution pattern

SourceSKILL.md
239bunx @lythos/[email protected] archive \
240 --from /tmp/arena-$(date +%Y%m%d-%H%M%S) \
241 --to playground/arena-$(date +%Y%m%d-%H%M%S) \
242 --sides side-a,side-b \
243 --report ./report.md
Scanned on Oct 31, 2026
View Security Dashboard
Installation guide →