Trust Assessment
check-network received a trust score of 90/100, placing it in the Trusted category. This skill has passed all critical security checks and demonstrates strong security practices.
SkillShield's automated analysis identified 1 finding: 0 critical, 1 high, 0 medium, and 0 low severity. Key findings include Direct shell command execution instruction.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 14, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings1
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| HIGH | Direct shell command execution instruction The skill's primary body directly instructs the agent (or a user interacting with the agent) to execute a shell command (`curl google.com -vv`). While the current command is benign, this pattern creates a direct command injection vulnerability. If the AI agent is designed to interpret and execute such instructions, a malicious actor could modify this skill to include arbitrary shell commands, leading to remote code execution in the agent's environment. Avoid embedding raw shell commands directly in skill descriptions for execution. If shell execution is required, implement it through a dedicated, sandboxed tool with strict input validation and explicit user confirmation. Alternatively, provide the command as an example for manual user execution, clearly distinguishing it from agent-executable instructions. | LLM | SKILL.md:7 |
Scan History
Embed Code
[](https://skillshield.io/report/bfaf4f68dfc42e40)
Powered by SkillShield