fasterizy

agent
Security Audit
Fail
Health Pass
  • License — License: MIT
  • Description — Repository has a description
  • Active repo — Last push 0 days ago
  • Community trust — 12 GitHub stars
Code Fail
  • os.homedir — User home directory access in cli/common.js
  • process.env — Environment variable access in cli/common.js
  • fs module — File system access in cli/common.js
  • fs module — File system access in cli/fs-helpers.js
  • fs.rmSync — Destructive file system operation in cli/install-hooks.js
  • fs module — File system access in cli/install-hooks.js
  • child_process — Shell command execution capability in cli/install-plugin.js
  • execSync — Synchronous shell command execution in cli/install-plugin.js
  • fs.rmSync — Destructive file system operation in cli/install-plugin.js
  • fs module — File system access in cli/install-plugin.js
  • os.homedir — User home directory access in cli/install-rule-file.js
  • fs module — File system access in cli/install-rule-file.js
  • child_process — Shell command execution capability in cli/install.js
  • spawnSync — Synchronous process spawning in cli/install.js
Permissions Pass
  • Permissions — No dangerous permissions requested
Purpose
This multi-agent skill is designed to accelerate workflows in coding assistants (like Claude Code and Codex) by streamlining Q&A, planning, and technical documentation tasks.

Security Assessment
Overall risk is rated as High. The installation scripts exhibit highly intrusive behaviors for a simple workflow skill. The code relies on synchronous shell command execution (`execSync`, `spawnSync`) and spawns child processes, which can be used to run arbitrary commands on your machine. It accesses the user's home directory and environment variables, while performing destructive file system operations (`fs.rmSync`). No hardcoded secrets were detected, and it makes no explicitly flagged dangerous network requests, but the extensive file manipulation and command execution capabilities pose a significant security threat if compromised.

Quality Assessment
The project is actively maintained, with its most recent push occurring today. It uses the permissive and standard MIT license. However, community trust and adoption are currently very low, with only 12 GitHub stars. This means the codebase has undergone very little public scrutiny, increasing the risk of undetected vulnerabilities.

Verdict
Use with caution—while the tool is actively maintained and properly licensed, developers should thoroughly inspect the installation scripts before running them, as the extensive shell execution and destructive file operations pose a substantial security risk.
SUMMARY

Multi-agent skill for faster workflows

README.md

fasterizy

fasterizy

npm GitHub stars

Fasterizy is a multi-agent skill (one SKILL.md). It speeds up work in agent-assisted workflows by shortening the time between turns. Tuned for Q&A, planning, and technical documentation with technical accuracy and exact terminology.

Install via skills.sh

Use vercel-labs/skills and npx skills add. The same skill ships to many agents (for example Claude Code, Codex, Cursor, OpenCode, Windsurf, Copilot, Antigravity, Cline, and others the toolchain supports).

npx skills add felipeinf/fasterizy -a opencode

Replace opencode with your agent flag.

Native plugins

Claude Code

/plugin marketplace add felipeinf/fasterizy
/plugin install fasterizy@fasterizy

Codex

npx fasterizy install --agents codex only installs hooks under the Codex config (including hooks.json and codex_hooks in config.toml). It does not add a card to the Plugin directory. For that, use the commands below (requires this repo to include .agents/plugins/marketplace.json on the branch you track). Restart Codex after any plugin or marketplace change.

/plugin marketplace add felipeinf/fasterizy
/plugin install fasterizy@fasterizy

Install via CLI

npx fasterizy install

Also: update, start, stop, status, -h.

Chat

/fasterizy toggles on · /fasterizy on · /fasterizy off

License

MIT. See LICENSE.

Reviews (0)

No results found