Trust Assessment
nasa-automation received a trust score of 89/100, placing it in the Mostly Trusted category. This skill has passed most security checks with only minor considerations noted.
SkillShield's automated analysis identified 2 findings: 0 critical, 0 high, 2 medium, and 0 low severity. Key findings include Unpinned dependency on Rube MCP, Broad tool execution capabilities via Rube MCP.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 17, 2026 (commit 99e2a295). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings2
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| MEDIUM | Unpinned dependency on Rube MCP The skill's manifest declares a dependency on the 'rube' MCP without specifying a version. This could lead to unexpected behavior or security vulnerabilities if the 'rube' MCP changes in an incompatible or malicious way, as the skill would automatically use the latest version without explicit review. Pin the version of the 'rube' MCP in the manifest to ensure consistent and secure behavior. For example, specify a minimum version or an exact version. | LLM | SKILL.md | |
| MEDIUM | Broad tool execution capabilities via Rube MCP The skill instructs the LLM to use `RUBE_MULTI_EXECUTE_TOOL` to execute any tool discovered via `RUBE_SEARCH_TOOLS` for 'Nasa operations'. This grants the LLM broad, undefined access to potentially sensitive operations within the Nasa toolkit without specific constraints on which tools can be called or with what arguments. The scope of 'Nasa operations' tools is not limited within the skill's instructions, potentially leading to excessive permissions for the LLM. Implement stricter controls or a whitelist for the specific 'Nasa operations' tools and arguments that the LLM is permitted to use. Provide more granular tool access rather than allowing execution of any discovered tool, or clearly define the boundaries of 'Nasa operations'. | LLM | SKILL.md:50 |
Scan History
Embed Code
[](https://skillshield.io/report/6f9bfdc18df4be19)
Powered by SkillShield