Trust Assessment
apify-ultimate-scraper received a trust score of 85/100, placing it in the Mostly Trusted category. This skill has passed most security checks with only minor considerations noted.
SkillShield's automated analysis identified 1 finding: 0 critical, 0 high, 1 medium, and 0 low severity. Key findings include Unsafe shell execution via sourcing .env file.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on October 1, 2026 (commit f5e84aa9). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings1
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| MEDIUM | Unsafe shell execution via sourcing .env file The skill instructs the LLM to run 'source .env' to load environment variables. Sourcing a file executes its contents as a shell script. If the workspace contains a malicious or untrusted .env file, this will result in arbitrary command execution in the user's shell environment. Avoid instructing the LLM to source files directly. Instead, suggest reading the file to parse the required environment variables (e.g., by reading the file contents and setting the variable manually) or using a dedicated dotenv parser. | LLM | SKILL.md:23 |
Scan History
Embed Code
[](https://skillshield.io/report/804dacb57743e13f)
Powered by SkillShield