Trust Assessment
captcha-solver received a trust score of 95/100, placing it in the Trusted category. This skill has passed all critical security checks and demonstrates strong security practices.
SkillShield's automated analysis identified 2 findings: 0 critical, 0 high, 1 medium, and 0 low severity. Key findings include Skill strategy includes taking screenshots, risking data exposure, Skill transmits data to third-party 2Captcha service.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 14, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings2
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| MEDIUM | Skill strategy includes taking screenshots, risking data exposure The skill's described strategy involves taking screenshots of the browser page. If not handled securely, these screenshots could capture sensitive user data (e.g., personal information, financial details) and lead to unintended data exfiltration or exposure. The implementation of `browser_subagent` would require careful review to ensure proper sandboxing, limited scope of capture, and secure handling of captured images. Implement screenshot functionality with strict sandboxing. Ensure only necessary regions are captured and sensitive data is redacted. Securely store or transmit screenshots with user consent and appropriate encryption. Provide clear user warnings about data capture. | LLM | SKILL.md:15 | |
| INFO | Skill transmits data to third-party 2Captcha service The skill is designed to use the 2Captcha API for captcha resolution, as indicated by the mention of `2CAPTCHA_API_KEY`. This involves sending captcha images and potentially other related page data to the 2Captcha service, a third-party provider. Users should be fully aware of this data sharing and its privacy implications. Clearly document the data sharing practices with 2Captcha, including what data is sent, for what purpose, and 2Captcha's privacy policy. Ensure user consent mechanisms are in place before enabling this feature. | LLM | SKILL.md:16 |
Scan History
Embed Code
[](https://skillshield.io/report/df4b337797935375)
Powered by SkillShield