Trust Assessment
2233researchskill received a trust score of 58/100, placing it in the Caution category. This skill has some security considerations that users should review before deployment.
SkillShield's automated analysis identified 3 findings: 1 critical, 1 high, 1 medium, and 0 low severity. Key findings include Missing required field: name, Unsanitized user input in shell command, Unpinned dependencies in setup script.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. The LLM Behavioral Safety layer scored lowest at 55/100, indicating areas for improvement.
Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings3
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| CRITICAL | Unsanitized user input in shell command The `SKILL.md` defines a workflow step that executes a shell command including the user-provided `{question}` placeholder. This placeholder is directly interpolated into the command string without proper sanitization or escaping. An attacker can craft a malicious `question` (e.g., `'; rm -rf / --no-preserve-root;'`) to break out of the quoted string and execute arbitrary shell commands on the host system. This can lead to data exfiltration, system compromise, or denial of service. Implement robust input sanitization and escaping for all user-provided variables used in shell commands. A safer approach would be to pass the user input as an environment variable or through a temporary file, or to use a library function like `shlex.quote()` if constructing the command in Python before execution. Avoid direct string interpolation of untrusted input into shell commands. | LLM | SKILL.md:14 | |
| HIGH | Unpinned dependencies in setup script The `scripts/setup.sh` installs external dependencies (`clawhub` via `npm` and `secure-sync` via `clawhub install`) without specifying exact versions. This practice introduces a significant supply chain risk. If a malicious update to the `clawhub` npm package or the `secure-sync` skill is published, this setup script would automatically install the compromised version, leading to arbitrary code execution during skill setup. The script then proceeds to execute scripts from the unpinned `secure-sync` skill, exacerbating the risk. Pin all external dependencies to specific, known-good versions (e.g., `npm i -g clawhub@1.2.3` and `clawhub install secure-sync@1.0.0`). Regularly audit and update these pinned versions after verifying their integrity and security. Consider using a lock file mechanism if available for the dependency management system. | LLM | scripts/setup.sh:8 | |
| MEDIUM | Missing required field: name The 'name' field is required for claude_code skills but is missing from frontmatter. Add a 'name' field to the SKILL.md frontmatter. | Static | skills/cyberengage/2233researchskill/SKILL.md:1 |
Scan History
Embed Code
[](https://skillshield.io/report/3d0322decca75770)
Powered by SkillShield