Skip to main content

lythoskill-arena

Facilitates controlled-variable testing for AI skills and deck configurations, enabling effective A/B comparisons and performance evaluations.

Install this skill

or
93/100

Security score

The lythoskill-arena skill was audited on Sep 11, 2026 and we found 7 security issues across 1 threat category. Review the findings below before installing.

Categories Tested

Security Issues

low line 127

Command substitution pattern

SourceSKILL.md
125 bunx @lythos/[email protected] prepare-workdir \
126 --deck ./test-deck.toml \
127 --out /tmp/arena-$(date +%Y%m%d-%H%M%S) \
128 --brief "Execute the target skill's core workflow"
129 ```
low line 157

Command substitution pattern

SourceSKILL.md
155bunx @lythos/[email protected] prepare-workdir \
156 --deck ./side-a.toml \
157 --out /tmp/arena-$(date +%Y%m%d-%H%M%S)-side-a \
158 --brief "task description" \
159 --dry-run
low line 164

Command substitution pattern

SourceSKILL.md
162bunx @lythos/[email protected] prepare-workdir \
163 --deck ./side-a.toml \
164 --out /tmp/arena-$(date +%Y%m%d-%H%M%S)-side-a \
165 --brief "task description"
166```
low line 225

Command substitution pattern

SourceSKILL.md
223# Plan-first
224bunx @lythos/[email protected] archive \
225 --from /tmp/arena-$(date +%Y%m%d-%H%M%S) \
226 --to playground/arena-$(date +%Y%m%d-%H%M%S) \
227 --sides side-a,side-b \
low line 226

Command substitution pattern

SourceSKILL.md
224bunx @lythos/[email protected] archive \
225 --from /tmp/arena-$(date +%Y%m%d-%H%M%S) \
226 --to playground/arena-$(date +%Y%m%d-%H%M%S) \
227 --sides side-a,side-b \
228 --report ./report.md \
low line 233

Command substitution pattern

SourceSKILL.md
231# Execute (same minus --dry-run)
232bunx @lythos/[email protected] archive \
233 --from /tmp/arena-$(date +%Y%m%d-%H%M%S) \
234 --to playground/arena-$(date +%Y%m%d-%H%M%S) \
235 --sides side-a,side-b \
low line 234

Command substitution pattern

SourceSKILL.md
232bunx @lythos/[email protected] archive \
233 --from /tmp/arena-$(date +%Y%m%d-%H%M%S) \
234 --to playground/arena-$(date +%Y%m%d-%H%M%S) \
235 --sides side-a,side-b \
236 --report ./report.md
Scanned on Sep 11, 2026
View Security Dashboard
Installation guide →