Security Audit

frankxai/claude-skills-library:free-skills/arcanea-book-cover

github.com/frankxai/claude-skills-library

AI SkillCommit 93c4aad53fe8

CAUTION

Scanned about 10 hours ago

Critical

Immediate action required

High

Priority fixes suggested

Medium

Best practices review

Low

Acknowledged / Tracked

Trust Assessment

frankxai/claude-skills-library:free-skills/arcanea-book-cover received a trust score of 56/100, placing it in the Caution category. This skill has some security considerations that users should review before deployment.

SkillShield's automated analysis identified 2 findings: 1 critical, 1 high, 0 medium, and 0 low severity. Key findings include Remote code execution: curl/wget pipe to shell, Shell Command Injection via Unescaped Variables.

The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.

Last analyzed on October 20, 2026 (commit 93c4aad5). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.

Layer Breakdown

Manifest Analysis

100%

Static Code Analysis

70%

Dependency Graph

100%

LLM Behavioral Safety

85%

Behavioral Risk Signals

Network Access

1 finding

Shell Execution

2 findings

Dynamic Code

1 finding

Security Findings2

Severity	Finding	Layer	Location
CRITICAL	Remote code execution: curl/wget pipe to shell Detected a pattern that downloads and immediately executes remote code. This is a primary malware delivery vector. Never pipe curl/wget output directly to a shell interpreter.	Static	free-skills/arcanea-book-cover/SKILL.md:102
HIGH	Shell Command Injection via Unescaped Variables The skill instructs the agent to construct and execute a shell command containing dynamically generated content (`PROMPT_HERE` and `SLUG`). If the book title, description, or generated prompt contains shell metacharacters (such as double quotes, backticks, or semicolons), it can lead to arbitrary command execution on the host system. Additionally, the command references `$GEMINI_API_KEY`, making it a prime target for exfiltration via injected commands. Avoid executing raw shell commands with inline LLM-generated or user-provided text. Instead, implement a dedicated Python script or tool that safely performs the API request using a standard HTTP library (like `requests` or `urllib3`) and handles JSON serialization safely, or use the official Google GenAI SDK.	LLM	SKILL.md:138

Scan History

Embed Code

[![SkillShield](https://skillshield.io/api/v1/badge/ba3f33df76eb1f31.svg)](https://skillshield.io/report/ba3f33df76eb1f31)