Trust Assessment
skill-sync received a trust score of 72/100, placing it in the Caution category. This skill has some security considerations that users should review before deployment.
SkillShield's automated analysis identified 1 finding: 1 critical, 0 high, 0 medium, and 0 low severity. Key findings include Path Traversal in skill-sync script leading to arbitrary directory deletion and file write.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on October 1, 2026 (commit 439cd3a9). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings1
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| CRITICAL | Path Traversal in skill-sync script leading to arbitrary directory deletion and file write The `skill-sync` script does not validate or sanitize the `skill_name` parameter in `cmd_install` and `cmd_push`. An attacker or a malicious prompt could supply a path traversal sequence (e.g., `../../`) as the skill name. This resolves `dest` to directories outside the intended local skills directory (such as the user's home directory `$HOME`). Consequently, `rm -rf "$dest"` will delete arbitrary directories (including `$HOME`), and `cp -r` will copy files to/from arbitrary locations. Sanitize the `skill_name` parameter to ensure it does not contain path traversal sequences like `..` or slashes `/`. For example, add a check: `if [[ "$skill_name" == *"/"* || "$skill_name" == *".."* ]]; then error "Invalid skill name"; exit 1; fi`. | LLM | scripts/skill-sync:98 |
Scan History
Embed Code
[](https://skillshield.io/report/d19548b99b08158c)
Powered by SkillShield