Trust Assessment
alexa-cli received a trust score of 65/100, placing it in the Caution category. This skill has some security considerations that users should review before deployment.
SkillShield's automated analysis identified 2 findings: 1 critical, 1 high, 0 medium, and 0 low severity. Key findings include Unpinned Go module dependency, Potential for shell command injection through `alexacli` arguments.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. The LLM Behavioral Safety layer scored lowest at 55/100, indicating areas for improvement.
Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings2
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| CRITICAL | Potential for shell command injection through `alexacli` arguments The skill demonstrates using `alexacli command` and `alexacli ask` with user-provided text (e.g., `alexacli command "turn off the living room lights"`). If the LLM constructs these commands by directly interpolating untrusted user input into the quoted string argument without proper sanitization or escaping, a malicious user could inject arbitrary shell commands. For example, input like `lights" && rm -rf / #` could lead to `alexacli command "lights" && rm -rf / #"`, executing `rm -rf /`. The LLM calling this skill must strictly sanitize or properly escape any user-provided input before passing it as an argument to `alexacli`. Specifically, ensure that user input cannot break out of the quoted string argument or introduce new shell commands. Consider using a library function that safely escapes shell arguments. | LLM | skill.md:30 | |
| HIGH | Unpinned Go module dependency The skill's installation instructions for Go use `@latest` for the `github.com/buddyh/alexa-cli/cmd/alexa` module. This means that any new version, including potentially malicious ones, would be installed without explicit version pinning, introducing a supply chain risk. A compromised upstream repository could lead to the installation of malicious code. Pin the Go module dependency to a specific, immutable version (e.g., a commit hash or a semantic version tag) to ensure deterministic builds and prevent unexpected or malicious updates. | LLM | skill.md |
Scan History
Embed Code
[](https://skillshield.io/report/36e0fab6942e3c0d)
Powered by SkillShield