Trust Assessment
i18n-expert received a trust score of 79/100, placing it in the Mostly Trusted category. This skill has passed most security checks with only minor considerations noted.
SkillShield's automated analysis identified 2 findings: 0 critical, 1 high, 1 medium, and 0 low severity. Key findings include Missing required field: name, Skill declares excessive 'Bash' permission.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 15, 2026 (commit 1823c3f6). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings2
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| HIGH | Skill declares excessive 'Bash' permission The skill is described as an 'i18n Expert' providing advice and code examples. The declared 'Bash' permission in the manifest allows the AI agent to execute arbitrary shell commands. While the skill's content itself does not directly instruct the agent to use this permission, its presence in the manifest creates a high-risk attack surface. An expert skill primarily provides information and code, and typically does not require direct shell execution capabilities. This permission could be exploited if a malicious user prompts the agent to execute commands, leading to command injection vulnerabilities. Remove 'Bash' from the 'allowed-tools' list. Re-evaluate if 'Write' and 'Edit' are strictly necessary for an advisory skill, as they also grant significant modification capabilities. | LLM | Manifest (frontmatter JSON) | |
| MEDIUM | Missing required field: name The 'name' field is required for claude_code skills but is missing from frontmatter. Add a 'name' field to the SKILL.md frontmatter. | Static | plugins/specweave-frontend/skills/i18n-expert/SKILL.md:1 |
Scan History
Embed Code
[](https://skillshield.io/report/15d661aba32df42c)
Powered by SkillShield