Trust Assessment
basename-agent received a trust score of 92/100, placing it in the Trusted category. This skill has passed all critical security checks and demonstrates strong security practices.
SkillShield's automated analysis identified 2 findings: 0 critical, 0 high, 1 medium, and 1 low severity. Key findings include Puppeteer sandbox disabled, Unpinned dependencies in package.json.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 14, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings2
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| MEDIUM | Puppeteer sandbox disabled The puppeteer browser is launched with '--no-sandbox' and '--disable-setuid-sandbox' flags. Disabling the browser's sandbox significantly reduces its security posture, making it more vulnerable to exploits if untrusted web content is processed. If the browser is compromised, it could lead to arbitrary code execution outside the isolated browser process. Remove the '--no-sandbox' and '--disable-setuid-sandbox' arguments from the puppeteer launch configuration. Ensure the execution environment allows the browser sandbox to operate correctly. If running in a container, consider alternative isolation mechanisms or ensure the container itself is sufficiently sandboxed. | LLM | scripts/register-basename.js:139 | |
| LOW | Unpinned dependencies in package.json The 'package.json' uses caret (^) ranges for dependencies, allowing minor and patch updates. While common, this practice means that new versions of dependencies could be installed without explicit review, potentially introducing new vulnerabilities or breaking changes. For critical applications, strict pinning to exact versions is often preferred. Consider pinning dependencies to exact versions (e.g., '1.2.3' instead of '^1.2.3') or using a lock file (like 'package-lock.json' or 'yarn.lock') to ensure deterministic builds and prevent unexpected dependency updates. Regularly audit dependencies for known vulnerabilities. | LLM | package.json:6 |
Scan History
Embed Code
[](https://skillshield.io/report/d3977fb9baa31865)
Powered by SkillShield