Trust Assessment
knowledge-graph received a trust score of 85/100, placing it in the Mostly Trusted category. This skill has passed most security checks with only minor considerations noted.
SkillShield's automated analysis identified 1 finding: 0 critical, 0 high, 1 medium, and 0 low severity. Key findings include Excessive Exec Permission for Directory Creation.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on July 1, 2026 (commit a4d31ad1). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings1
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| MEDIUM | Excessive Exec Permission for Directory Creation The skill requests 'exec' permissions to run local filesystem commands for creating entity folders. Using shell commands (like 'mkdir') to create directories based on user-controlled entity names (slugs) introduces a risk of command injection. This should be handled using standard filesystem APIs instead of shell execution. Avoid requesting or using shell execution ('exec') for directory creation. Use standard filesystem tools or APIs if available, or ensure strict sanitization of the entity slug before running any shell commands. | LLM | SKILL.md:1 |
Scan History
Embed Code
[](https://skillshield.io/report/d25cc0dfa826a287)
Powered by SkillShield