Security Audit

emilkowalski/skills:skills/emil-design-eng

github.com/emilkowalski/skills

AI SkillCommit d23d7f88a2e2

CRITICAL

Scanned about 2 months ago

Critical

Immediate action required

High

Priority fixes suggested

Medium

Best practices review

Low

Acknowledged / Tracked

Trust Assessment

emilkowalski/skills:skills/emil-design-eng received a trust score of 10/100, placing it in the Untrusted category. This skill has significant security findings that require attention before use in production.

SkillShield's automated analysis identified 7 findings: 0 critical, 7 high, 0 medium, and 0 low severity. Key findings include Covert behavior / concealment directives.

The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. The Manifest Analysis layer scored lowest at 0/100, indicating areas for improvement.

Last analyzed on September 4, 2026 (commit d23d7f88). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.

Layer Breakdown

Manifest Analysis

Static Code Analysis

100%

Dependency Graph

100%

LLM Behavioral Safety

100%

Security Findings7

Severity	Finding	Layer	Location
HIGH	Covert behavior / concealment directives CSS-based text hiding Remove hidden instructions, zero-width characters, and bidirectional overrides. Skill instructions should be fully visible and transparent to users.	Manifest	skills/emil-design-eng/SKILL.md:41
HIGH	Covert behavior / concealment directives CSS-based text hiding Remove hidden instructions, zero-width characters, and bidirectional overrides. Skill instructions should be fully visible and transparent to users.	Manifest	skills/emil-design-eng/SKILL.md:226
HIGH	Covert behavior / concealment directives CSS-based text hiding Remove hidden instructions, zero-width characters, and bidirectional overrides. Skill instructions should be fully visible and transparent to users.	Manifest	skills/emil-design-eng/SKILL.md:255
HIGH	Covert behavior / concealment directives CSS-based text hiding Remove hidden instructions, zero-width characters, and bidirectional overrides. Skill instructions should be fully visible and transparent to users.	Manifest	skills/emil-design-eng/SKILL.md:309
HIGH	Covert behavior / concealment directives CSS-based text hiding Remove hidden instructions, zero-width characters, and bidirectional overrides. Skill instructions should be fully visible and transparent to users.	Manifest	skills/emil-design-eng/SKILL.md:326
HIGH	Covert behavior / concealment directives CSS-based text hiding Remove hidden instructions, zero-width characters, and bidirectional overrides. Skill instructions should be fully visible and transparent to users.	Manifest	skills/emil-design-eng/SKILL.md:605
HIGH	Covert behavior / concealment directives CSS-based text hiding Remove hidden instructions, zero-width characters, and bidirectional overrides. Skill instructions should be fully visible and transparent to users.	Manifest	skills/emil-design-eng/SKILL.md:661

Scan History

Embed Code

[![SkillShield](https://skillshield.io/api/v1/badge/0957d3b15cb2e3d0.svg)](https://skillshield.io/report/0957d3b15cb2e3d0)