Trust Assessment
lorem-ipsum received a trust score of 85/100, placing it in the Mostly Trusted category. This skill has passed most security checks with only minor considerations noted.
SkillShield's automated analysis identified 1 finding: 0 critical, 1 high, 0 medium, and 0 low severity. Key findings include Unrestricted File Write via --output argument.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 11, 2026 (commit 326f2466). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings1
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| HIGH | Unrestricted File Write via --output argument The `scripts/generate.py` script allows writing generated lorem ipsum content to an arbitrary file path specified by the `--output` argument. There is no validation or sanitization of the provided path, which could allow an attacker to overwrite sensitive system files (e.g., `/etc/passwd`, configuration files, user data) with lorem ipsum text. This could lead to denial of service, data corruption, or system instability if the agent is running with sufficient permissions. Implement robust path validation and sanitization for the `--output` argument. Restrict output paths to a designated safe directory (e.g., a temporary directory or a user-specific output folder). Prevent directory traversal attacks (e.g., by resolving and checking the absolute path against allowed directories) to ensure files can only be written to intended locations. | Static | scripts/generate.py:300 |
Scan History
Embed Code
[](https://skillshield.io/report/c189fff0f696bbb4)
Powered by SkillShield