Security Audit
zylvie-automation
github.com/ComposioHQ/awesome-claude-skillsTrust Assessment
zylvie-automation received a trust score of 85/100, placing it in the Mostly Trusted category. This skill has passed most security checks with only minor considerations noted.
SkillShield's automated analysis identified 2 findings: 0 critical, 0 high, 2 medium, and 0 low severity. Key findings include Skill enables broad, dynamic tool execution, Access to powerful `RUBE_REMOTE_WORKBENCH` tool.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 20, 2026 (commit 27904475). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings2
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| MEDIUM | Skill enables broad, dynamic tool execution The skill explicitly instructs the LLM to dynamically discover available Zylvie tools using `RUBE_SEARCH_TOOLS` and then execute them via `RUBE_MULTI_EXECUTE_TOOL`. This design grants the LLM the ability to invoke any Zylvie operation exposed through Composio, without specific constraints defined within the skill itself. While flexible, this broad access could be exploited by a malicious prompt to perform unintended or destructive actions if the LLM is not adequately safeguarded. Implement stricter controls on which tool slugs can be executed, or introduce an explicit human approval step for sensitive operations. The LLM should be instructed to only execute tools that align with the user's explicit intent and pre-defined safe operations. | LLM | SKILL.md:49 | |
| MEDIUM | Access to powerful `RUBE_REMOTE_WORKBENCH` tool The skill references `RUBE_REMOTE_WORKBENCH` with `run_composio_tool()` for 'Bulk ops'. This suggests a highly capable tool that can orchestrate or execute other Composio tools, potentially with broad permissions. Without specific limitations or sandboxing described, this tool could be leveraged by a malicious prompt to perform complex, unintended, or destructive operations within the Zylvie ecosystem. The exact capabilities of `run_composio_tool()` are not detailed, but 'workbench' and 'bulk operations' imply significant power. Clarify the exact scope and limitations of `RUBE_REMOTE_WORKBENCH` and `run_composio_tool()`. If it allows arbitrary code or highly sensitive operations, consider restricting its use or requiring explicit human confirmation for its invocation. | LLM | SKILL.md:77 |
Scan History
Embed Code
[](https://skillshield.io/report/395175ebc2766893)
Powered by SkillShield