Security Audit

alirezarezvani/claude-skills:business-growth/skills/contract-and-proposal-writer

github.com/alirezarezvani/claude-skills

AI SkillCommit aa8d778811a5

CRITICAL

Scanned 2 months ago

Critical

Immediate action required

High

Priority fixes suggested

Medium

Best practices review

Low

Acknowledged / Tracked

Trust Assessment

alirezarezvani/claude-skills:business-growth/skills/contract-and-proposal-writer received a trust score of 35/100, placing it in the Untrusted category. This skill has significant security findings that require attention before use in production.

SkillShield's automated analysis identified 3 findings: 0 critical, 3 high, 0 medium, and 0 low severity. Key findings include Covert behavior / concealment directives.

The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. The Manifest Analysis layer scored lowest at 55/100, indicating areas for improvement.

Last analyzed on August 3, 2026 (commit aa8d7788). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.

Layer Breakdown

Manifest Analysis

55%

Static Code Analysis

100%

Dependency Graph

100%

LLM Behavioral Safety

100%

Security Findings3

Severity	Finding	Layer	Location
HIGH	Covert behavior / concealment directives Directive to hide behavior from user Remove hidden instructions, zero-width characters, and bidirectional overrides. Skill instructions should be fully visible and transparent to users.	Manifest	business-growth/skills/contract-and-proposal-writer/SKILL.md:49
HIGH	Covert behavior / concealment directives Directive to hide behavior from user Remove hidden instructions, zero-width characters, and bidirectional overrides. Skill instructions should be fully visible and transparent to users.	Manifest	business-growth/skills/contract-and-proposal-writer/SKILL.md:189
HIGH	Covert behavior / concealment directives Directive to hide behavior from user Remove hidden instructions, zero-width characters, and bidirectional overrides. Skill instructions should be fully visible and transparent to users.	Manifest	business-growth/skills/contract-and-proposal-writer/SKILL.md:419

Scan History

Embed Code

[![SkillShield](https://skillshield.io/api/v1/badge/2141ef293a9de0dc.svg)](https://skillshield.io/report/2141ef293a9de0dc)