Trust Assessment
ai-daily-briefing received a trust score of 94/100, placing it in the Trusted category. This skill has passed all critical security checks and demonstrates strong security practices.
SkillShield's automated analysis identified 1 finding: 0 critical, 0 high, 1 medium, and 0 low severity. Key findings include Broad Local Filesystem Access.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings1
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| MEDIUM | Broad Local Filesystem Access The skill explicitly instructs the AI agent to read multiple local files and folders, including `todo.md`, `meeting-notes/` folder, `MEMORY.md`, `memory/[today].md`, and `USER.md`. These files can contain highly sensitive personal and professional information (e.g., tasks, meeting details, personal preferences, and long-term memory). While this access is necessary for the skill's intended functionality (generating a daily briefing), it grants a broad scope of read permissions to local filesystem data. This increases the attack surface, as a subsequent prompt injection or other compromise of the AI agent could leverage these pre-granted permissions to read sensitive user data for unauthorized purposes. Review the necessity of accessing all listed files and folders. Implement granular access controls if the platform supports them, ensuring the skill can only read specific files or directories essential for its operation. Consider sandboxing or limiting the scope of filesystem access for the AI agent. Educate users about the types of data accessed by the skill and the implications of granting such permissions. | LLM | SKILL.md:105 |
Scan History
Embed Code
[](https://skillshield.io/report/8b55235f2d9bd8de)
Powered by SkillShield