Trust Assessment
web-design-guidelines received a trust score of 85/100, placing it in the Mostly Trusted category. This skill has passed most security checks with only minor considerations noted.
SkillShield's automated analysis identified 1 finding: 0 critical, 1 high, 0 medium, and 0 low severity. Key findings include Remote Instruction Ingestion (Indirect Prompt Injection).
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on August 1, 2026 (commit a4d31ad1). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings1
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| HIGH | Remote Instruction Ingestion (Indirect Prompt Injection) The skill is designed to fetch guidelines from a remote URL and instruct the LLM to execute/apply the rules and instructions contained within that fetched content. This introduces a high risk of Indirect Prompt Injection, where a compromise or modification of the remote file could lead to arbitrary instruction execution, data exfiltration, or other malicious behaviors within the agent's context. Hardcode the guidelines directly within the skill package or validate and parse the fetched content strictly as static data rather than instructing the LLM to dynamically adopt rules and instructions from an external source. | LLM | SKILL.md:17 |
Scan History
Embed Code
[](https://skillshield.io/report/3e8fdca48476bc33)
Powered by SkillShield