base44-cli
The base44 CLI is used for EVERYTHING related to base44 projects: resource configuration (entities, backend functions, ai agents), initialization and actions (resource creation, deployment). This skill is the place for learning about how to configure resources. When you plan or implement a feature, you must learn this skill
62
75%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Critical
Do not install without reviewing
Fix and improve this skill with Tessl
tessl review fix ./plugins/base44/skills/base44-cli/SKILL.mdSecurity
2 findings: 1 critical severity, 1 medium severity. Installing this skill is not recommended: please review these findings carefully if you do intend to do so.
E006: Malicious code pattern detected in skill scripts.
What this means
Detected high-risk code patterns in the skill content — including its prompts, tool definitions, and resources — such as data exfiltration, backdoors, remote code execution, credential theft, system compromise, supply chain attacks, and obfuscation techniques.
Why it was flagged
The content documents multiple legitimate features that, taken together with explicit guidance to avoid external checks and to leave secret-management commands hidden, create clear high-risk patterns (server-side exec/RCE, long-lived scheduled automations running as the creator, server-accessible OAuth tokens/secrets, and an instruction to avoid reading docs/pinning dependencies) that can be abused for data exfiltration, persistence, and supply-chain attacks.
W009: Direct money access capability detected (payment gateways, crypto, banking).
What this means
The skill is specifically designed for direct financial operations, giving the agent the ability to move money or execute financial transactions — such as payment processing, cryptocurrency operations, banking integrations, or market order execution.
Why it was flagged
The skill explicitly mentions support for Stripe as a connector ("Connectors let your app connect to external services (Google Calendar, Slack, Stripe, etc.)" and "stripe is also a valid connector type..."). Connectors are described as providing OAuth access tokens for backend functions to call external APIs, and Stripe is treated as a supported connector (provisioned automatically). This is a specific payment-gateway integration capability (Stripe), which constitutes Direct Financial Execution authority per the rules.
Low
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W012: Unverifiable external dependency detected (runtime URL that controls agent).
What this means
The skill fetches instructions or code from an external URL at runtime, and the fetched content directly controls the agent’s prompts or executes code. This dynamic dependency allows the external source to modify the agent’s behavior without any changes to the skill itself.
Why it was flagged
The Base44 CLI explicitly fetches agent configurations at runtime (e.g., `npx base44 agents pull`) and those remote agent files contain "instructions" that directly control agent behavior; the docs show runtime Base44 endpoints such as https://auth.base44.com/device and https://auth.base44.io/oauth/... which are used during authentication/authorization and point to the same external service that supplies agent configs.
- Repository
- openai/plugins
- Commit
11c74d6
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.