Trust Assessment
form-cro received a trust score of 94/100, placing it in the Trusted category. This skill has passed all critical security checks and demonstrates strong security practices.
SkillShield's automated analysis identified 1 finding: 0 critical, 0 high, 1 medium, and 0 low severity. Key findings include Skill instructs LLM to read local file.
The analysis covered 4 layers: dependency_graph, llm_behavioral_safety, manifest_analysis, static_code_analysis. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 16, 2026 (commit a04cb61a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings1
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| MEDIUM | Skill instructs LLM to read local file The skill explicitly instructs the LLM to read the content of a local file (`.claude/product-marketing-context.md`). This indicates the LLM has file system read access, which is an excessive permission. If the file contains sensitive information, this could lead to data exfiltration. The instruction 'read it before asking questions' is an explicit command for the LLM to perform a file operation. Restrict the LLM's ability to read local files or ensure that any files it is allowed to read do not contain sensitive information. If context is needed, it should be provided directly in the prompt or through a secure, controlled mechanism that does not grant broad file system access. | Unknown | SKILL.md:8 |
Scan History
Embed Code
[](https://skillshield.io/report/5b9313bfd3a9f30c)
Powered by SkillShield