Trust Assessment
knowledge-graph received a trust score of 85/100, placing it in the Mostly Trusted category. This skill has passed most security checks with only minor considerations noted.
SkillShield's automated analysis identified 1 finding: 0 critical, 0 high, 1 medium, and 0 low severity. Key findings include Excessive exec permission for filesystem operations.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on October 1, 2026 (commit 439cd3a9). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings1
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| MEDIUM | Excessive exec permission for filesystem operations The skill requests 'exec' permissions to run local filesystem commands for creating entity folders and scheduling jobs. Using shell execution (such as 'mkdir') with dynamically generated entity slugs derived from user input poses a command injection risk. Filesystem operations should be performed using native file APIs rather than shell commands. Remove 'exec' permissions for directory creation and use native filesystem APIs instead. Restrict the scope of scheduled jobs to prevent arbitrary command execution. | LLM | SKILL.md:1 |
Scan History
Embed Code
[](https://skillshield.io/report/d25cc0dfa826a287)
Powered by SkillShield