Trust Assessment
blackops-center received a trust score of 69/100, placing it in the Caution category. This skill has some security considerations that users should review before deployment.
SkillShield's automated analysis identified 2 findings: 1 critical, 0 high, 0 medium, and 1 low severity. Key findings include Node lockfile missing, Potential Command Injection via User Input in Shell Commands.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings2
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| CRITICAL | Potential Command Injection via User Input in Shell Commands The skill explicitly instructs the Assistant to construct and execute shell commands using user-provided input (e.g., post titles, content, IDs, status, limits). For example, when creating a post, the Assistant is told to 'Extract title and content from your message' and then 'Run `blackops-center create-post --title "..." --content "..."`'. If these user-provided strings are not properly sanitized or shell-escaped before being embedded into the command string, a malicious user could inject arbitrary shell commands, leading to remote code execution. Implement robust input sanitization and shell escaping for all user-provided arguments before constructing and executing shell commands. Ensure that all arguments are properly quoted or passed as separate arguments to a subprocess call that handles escaping, rather than directly concatenating them into a single shell string. | LLM | SKILL.md:82 | |
| LOW | Node lockfile missing package.json is present but no lockfile was found (package-lock.json, pnpm-lock.yaml, or yarn.lock). Commit a lockfile for deterministic dependency resolution. | Dependencies | skills/bennewton999/blackops-center/package.json |
Scan History
Embed Code
[](https://skillshield.io/report/389a6fdc1bf7d424)
Powered by SkillShield