Trust Assessment
apollo received a trust score of 86/100, placing it in the Mostly Trusted category. This skill has passed most security checks with only minor considerations noted.
SkillShield's automated analysis identified 1 finding: 0 critical, 1 high, 0 medium, and 0 low severity. Key findings include curl --data vulnerable to file exfiltration via @filename.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings1
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| HIGH | curl --data vulnerable to file exfiltration via @filename The `apollo-post.sh` script uses `curl --data "$JSON_BODY"` to send a POST request. The `JSON_BODY` argument is directly taken from user input. If `JSON_BODY` starts with an `@` character, `curl` interprets the remainder as a file path and attempts to read the file's content, sending it as the request body. This allows an attacker to exfiltrate arbitrary files from the system (e.g., `/etc/passwd`, `config/apollo.env` containing API keys) to the `APOLLO_BASE_URL` endpoint. This is a known behavior of `curl` and poses a significant data exfiltration risk if untrusted input can control the `JSON_BODY` argument. To prevent `curl` from interpreting `@filename` as a file to read, ensure that the `JSON_BODY` argument is always prefixed with a character that `curl` does not interpret specially, or explicitly validate that `JSON_BODY` does not start with `@`. For JSON data, it should always start with `{` or `[`. A robust fix would be to use `printf '%s' "$JSON_BODY" | curl ... --data @-` to force `curl` to read the data from stdin, or to add a check like `if [[ "$JSON_BODY" == @* ]]; then echo "Error: JSON_BODY cannot start with @"; exit 1; fi`. | LLM | scripts/apollo-post.sh:22 |
Scan History
Embed Code
[](https://skillshield.io/report/8455122190bfc175)
Powered by SkillShield