Security Audit
jnMetaCode/superpowers-zh:skills/chinese-git-workflow
github.com/jnMetaCode/superpowers-zhTrust Assessment
jnMetaCode/superpowers-zh:skills/chinese-git-workflow received a trust score of 18/100, placing it in the Untrusted category. This skill has significant security findings that require attention before use in production.
SkillShield's automated analysis identified 6 findings: 2 critical, 1 high, 1 medium, and 0 low severity. Key findings include File read + network send exfiltration, Sensitive path access: SSH key/config, Sensitive path access: Environment file.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. The Manifest Analysis layer scored lowest at 40/100, indicating areas for improvement.
Last analyzed on March 25, 2026 (commit 03baa780). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings6
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| CRITICAL | File read + network send exfiltration SSH key/config file access Remove access to sensitive files not required by the skill's stated purpose. SSH keys, cloud credentials, and browser data should never be read by skills unless explicitly part of their declared functionality. | Manifest | skills/chinese-git-workflow/SKILL.md:30 | |
| CRITICAL | File read + network send exfiltration .env file access Remove access to sensitive files not required by the skill's stated purpose. SSH keys, cloud credentials, and browser data should never be read by skills unless explicitly part of their declared functionality. | Manifest | skills/chinese-git-workflow/SKILL.md:485 | |
| HIGH | Sensitive path access: SSH key/config Access to SSH key/config path detected: '~/.ssh/config'. This may indicate credential theft. Verify that access to this sensitive path is justified and declared. | Static | skills/chinese-git-workflow/SKILL.md:30 | |
| MEDIUM | Sensitive path access: Environment file Access to Environment file path detected: '.env.local'. This may indicate credential theft. Verify that access to this sensitive path is justified and declared. | Static | skills/chinese-git-workflow/SKILL.md:485 | |
| INFO | Custom npm registry configured The skill recommends configuring npm to use `https://registry.npmmirror.com` as its default registry. While this is a legitimate mirror often used in China for performance, relying on a non-default package registry can introduce a supply chain risk if the mirror itself is compromised or serves altered packages. Users should be aware of the implications of changing their default package source. Advise users to verify the integrity of packages from custom registries and understand the associated supply chain risks. Consider adding a note about this in the skill documentation. | Static | SKILL.md:160 | |
| INFO | Custom npm registry configured The skill recommends configuring npm to use `https://registry.npmmirror.com` as its default registry. While this is a legitimate mirror often used in China for performance, relying on a non-default package registry can introduce a supply chain risk if the mirror itself is compromised or serves altered packages. Users should be aware of the implications of changing their default package source. Advise users to verify the integrity of packages from custom registries and understand the associated supply chain risks. Consider adding a note about this in the skill documentation. | Static | SKILL.md:240 |
Scan History
Embed Code
[](https://skillshield.io/report/3aacfef39d5e6d6f)
Powered by SkillShield