Trust Assessment
4chan-reader received a trust score of 50/100, placing it in the Caution category. This skill has some security considerations that users should review before deployment.
SkillShield's automated analysis identified 3 findings: 1 critical, 1 high, 1 medium, and 0 low severity. Key findings include Suspicious import: urllib.request, Potential data exfiltration: file read + network send, Unsanitized path allows arbitrary file write.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings3
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| CRITICAL | Unsanitized path allows arbitrary file write The `output_root_dir` argument for the `thread` command is directly used in `os.path.join` and `os.makedirs` without proper sanitization. An attacker can provide path traversal sequences (e.g., `../../`) in `output_root_dir` to write files to arbitrary locations on the file system where the agent has write permissions. This could lead to overwriting critical system files, creating malicious executables, or exfiltrating data by writing it to a publicly accessible directory. Implement strict validation and sanitization for `output_root_dir`. This could involve: 1) Restricting `output_root_dir` to a specific, pre-defined safe directory or a subdirectory of the skill's own data directory. 2) Normalizing the path using `os.path.abspath` and `os.path.realpath` and then checking if the resulting path is within an allowed base directory. 3) Rejecting any input containing path traversal sequences like `..` or absolute paths. | LLM | scripts/chan_extractor.py:120 | |
| HIGH | Potential data exfiltration: file read + network send Function 'get_thread' reads files and sends data over the network. This may indicate data exfiltration. Review this function to ensure file contents are not being sent to external servers. | Static | skills/aiasisbot61/4chan-reader/scripts/chan_extractor.py:114 | |
| MEDIUM | Suspicious import: urllib.request Import of 'urllib.request' detected. This module provides network or low-level system access. Verify this import is necessary. Network and system modules in skill code may indicate data exfiltration. | Static | skills/aiasisbot61/4chan-reader/scripts/chan_extractor.py:5 |
Scan History
Embed Code
[](https://skillshield.io/report/742f934ba00b9d01)
Powered by SkillShield