Security Audit

agentpixels

github.com/openclaw/skills

AI SkillCommit 13146e6a3d46

CRITICAL

Scanned 2 months ago

Critical

Immediate action required

High

Priority fixes suggested

Medium

Best practices review

Low

Acknowledged / Tracked

Trust Assessment

agentpixels received a trust score of 10/100, placing it in the Untrusted category. This skill has significant security findings that require attention before use in production.

SkillShield's automated analysis identified 5 findings: 2 critical, 2 high, 0 medium, and 1 low severity. Key findings include Hardcoded Stripe Secret Key detected, Hardcoded Bearer Token detected, Node lockfile missing.

The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. The Static Code Analysis layer scored lowest at 10/100, indicating areas for improvement.

Last analyzed on February 14, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.

Layer Breakdown

Manifest Analysis

100%

Static Code Analysis

10%

Dependency Graph

98%

LLM Behavioral Safety

100%

Behavioral Risk Signals

Filesystem Write

1 finding

Security Findings5

Severity	Finding	Layer	Location
CRITICAL	Hardcoded Stripe Secret Key detected A hardcoded Stripe Secret Key was found. Secrets should be stored in environment variables or a secret manager. Replace the hardcoded secret with an environment variable reference.	Static	skills/osadchiynikita/agentpixels-skill/SKILL.md:26
CRITICAL	Hardcoded Stripe Secret Key detected A hardcoded Stripe Secret Key was found. Secrets should be stored in environment variables or a secret manager. Replace the hardcoded secret with an environment variable reference.	Static	skills/osadchiynikita/agentpixels-skill/SKILL.md:36
HIGH	Hardcoded Bearer Token detected A hardcoded Bearer Token was found. Secrets should be stored in environment variables or a secret manager. Replace the hardcoded secret with an environment variable reference.	Static	skills/osadchiynikita/agentpixels-skill/SKILL.md:123
HIGH	Hardcoded Bearer Token detected A hardcoded Bearer Token was found. Secrets should be stored in environment variables or a secret manager. Replace the hardcoded secret with an environment variable reference.	Static	skills/osadchiynikita/agentpixels-skill/SKILL.md:133
LOW	Node lockfile missing package.json is present but no lockfile was found (package-lock.json, pnpm-lock.yaml, or yarn.lock). Commit a lockfile for deterministic dependency resolution.	Dependencies	skills/osadchiynikita/agentpixels-skill/package.json

Scan History

Embed Code

[![SkillShield](https://skillshield.io/api/v1/badge/fc72bc9775c09b7b.svg)](https://skillshield.io/report/fc72bc9775c09b7b)