Trust Assessment
clawland received a trust score of 19/100, placing it in the Untrusted category. This skill has significant security findings that require attention before use in production.
SkillShield's automated analysis identified 4 findings: 2 critical, 1 high, 1 medium, and 0 low severity. Key findings include Arbitrary command execution, Unsafe deserialization / dynamic eval, Unpinned npm dependencies in install script.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. The Manifest Analysis layer scored lowest at 33/100, indicating areas for improvement.
Last analyzed on February 12, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings4
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| CRITICAL | Arbitrary command execution Node.js child_process require Review all shell execution calls. Ensure commands are static (not built from user input), use absolute paths, and are strictly necessary. Prefer library APIs over shell commands. | Manifest | skills/olambdao/olambdao-dev/scripts/common.js:29 | |
| CRITICAL | Arbitrary command execution Node.js synchronous shell execution Review all shell execution calls. Ensure commands are static (not built from user input), use absolute paths, and are strictly necessary. Prefer library APIs over shell commands. | Manifest | skills/olambdao/olambdao-dev/scripts/common.js:30 | |
| HIGH | Unpinned npm dependencies in install script The `ensureDeps` function in `scripts/common.js` uses `npm install` to fetch dependencies. Several packages (`@coral-xyz/anchor`, `@solana/spl-token`, `bs58`, `tweetnacl`) are installed without specific version pinning (e.g., `package@1.2.3`), meaning the latest available version will be downloaded. This introduces a significant supply chain risk, as a malicious update to any of these packages could lead to arbitrary code execution on the user's system when the skill is run. Pin all npm dependencies to exact versions (e.g., `package@1.2.3`) in the `npm install` command within `ensureDeps`. Regularly review and update these pinned versions to incorporate security fixes, but only after vetting the new versions. | LLM | scripts/common.js:31 | |
| MEDIUM | Unsafe deserialization / dynamic eval Decryption followed by code execution Remove obfuscated code execution patterns. Legitimate code does not need base64-encoded payloads executed via eval, encrypted-then-executed blobs, or dynamic attribute resolution to call system functions. | Manifest | skills/olambdao/olambdao-dev/scripts/autoplay.js:73 |
Scan History
Embed Code
[](https://skillshield.io/report/02a709350b2894c5)
Powered by SkillShield