Security Audit

Luispitik/sinapsis-3.2:skills/cso-audit

github.com/Luispitik/sinapsis-3.2

AI SkillCommit f405238d5aab

CRITICAL

Scanned about 2 months ago

Critical

Immediate action required

High

Priority fixes suggested

Medium

Best practices review

Low

Acknowledged / Tracked

Trust Assessment

Luispitik/sinapsis-3.2:skills/cso-audit received a trust score of 43/100, placing it in the Untrusted category. This skill has significant security findings that require attention before use in production.

SkillShield's automated analysis identified 4 findings: 1 critical, 1 high, 2 medium, and 0 low severity. Key findings include File read + network send exfiltration, Dangerous tool allowed: Bash, Sensitive path access: Environment file.

The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.

Last analyzed on April 9, 2026 (commit f405238d). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.

Layer Breakdown

Manifest Analysis

70%

Static Code Analysis

78%

Dependency Graph

100%

LLM Behavioral Safety

93%

Behavioral Risk Signals

Network Access

1 finding

Filesystem Write

3 findings

Shell Execution

2 findings

Excessive Permissions

3 findings

Security Findings4

Severity	Finding	Layer	Location
CRITICAL	File read + network send exfiltration .env file access Remove access to sensitive files not required by the skill's stated purpose. SSH keys, cloud credentials, and browser data should never be read by skills unless explicitly part of their declared functionality.	Manifest	skills/cso-audit/SKILL.md:144
HIGH	Dangerous tool allowed: Bash The skill allows the 'Bash' tool without constraints. This grants arbitrary command execution. Remove unconstrained shell/exec tools from allowed-tools, or add specific command constraints.	Static	skills/cso-audit/SKILL.md:1
MEDIUM	Sensitive path access: Environment file Access to Environment file path detected: '.env.local'. This may indicate credential theft. Verify that access to this sensitive path is justified and declared.	Static	skills/cso-audit/SKILL.md:144
MEDIUM	Broad 'Write' permission with unspecified report output location The skill declares the powerful 'Write' permission and explicitly states its final step is to 'Generate report'. This report will contain sensitive audit findings, including potential paths to vulnerable files, details of secrets, and misconfigurations. Without explicit controls or specification of a secure output path within the skill's logic, there is a risk that this sensitive report could be written to an insecure or publicly accessible location, leading to information disclosure. It also opens a vector for arbitrary file overwrites if the 'Write' tool allows path manipulation. Restrict the 'Write' tool's capabilities to specific, secure directories (e.g., a temporary, non-public, or user-specified secure location). Ensure the skill's implementation explicitly defines and validates the output path for the report to prevent writing to arbitrary or sensitive locations.	LLM	SKILL.md:3

Scan History

Embed Code

[![SkillShield](https://skillshield.io/api/v1/badge/197defc7b1cbd1e7.svg)](https://skillshield.io/report/197defc7b1cbd1e7)