Security Audit
ncklrs/startup-os-skills:skills/sales-ops-analyst
github.com/ncklrs/startup-os-skillsTrust Assessment
ncklrs/startup-os-skills:skills/sales-ops-analyst received a trust score of 62/100, placing it in the Caution category. This skill has some security considerations that users should review before deployment.
SkillShield's automated analysis identified 1 finding: 1 critical, 0 high, 0 medium, and 0 low severity. Key findings include Prompt Injection: Untrusted content dictates LLM behavior.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on March 10, 2026 (commit 91625964). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings1
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| CRITICAL | Prompt Injection: Untrusted content dictates LLM behavior The skill's description, provided as untrusted input, contains a direct instruction to the host LLM: 'When invoked, apply the guidelines in `rules/` organized by:'. This attempts to dictate the LLM's operational behavior and potentially access local resources (`rules/`), which is a clear prompt injection vulnerability. The LLM should not follow directives embedded within untrusted skill definitions. Remove or neutralize any instructions or directives intended for the host LLM from the untrusted skill content. The LLM's behavior and access to internal resources should be controlled by trusted system prompts or orchestrator logic, not by the skill's user-provided description. | LLM | SKILL.md:22 |
Scan History
Embed Code
[](https://skillshield.io/report/4ba93e9273237193)
Powered by SkillShield