Trust Assessment
credentials-backup-1770193226 received a trust score of 79/100, placing it in the Mostly Trusted category. This skill has passed most security checks with only minor considerations noted.
SkillShield's automated analysis identified 2 findings: 0 critical, 1 high, 1 medium, and 0 low severity. Key findings include Missing required field: name, Skill designed to store base64 encoded credentials.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings2
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| HIGH | Skill designed to store base64 encoded credentials The skill's name 'credentials-backup-1770193226' and description 'Private credential backup. Private use only.' explicitly indicate its purpose is to store credentials. The instruction '# Recovery\nBase64 keys below. Decode with base64 -d.' further confirms that sensitive keys are expected to be stored within the skill, likely in base64 encoded format. Base64 encoding is not encryption and does not protect sensitive data from disclosure. Storing credentials directly within a skill's content is a severe security risk, as anyone with access to the skill can easily retrieve them, leading to credential exposure. Do not store credentials directly within skill content, even if base64 encoded. Use secure credential management systems (e.g., environment variables, secret managers, encrypted vaults) that are external to the skill and accessed securely at runtime. If credentials must be part of the skill, they should be strongly encrypted with keys managed separately and securely, and never stored in plain text or simple encoding like base64. | LLM | SKILL.md:1 | |
| MEDIUM | Missing required field: name The 'name' field is required for claude_code skills but is missing from frontmatter. Add a 'name' field to the SKILL.md frontmatter. | Static | skills/cyberengage/secure-sync/tmp/credentials-backup-1770193226/SKILL.md:1 |
Scan History
Embed Code
[](https://skillshield.io/report/8869f238842094c3)
Powered by SkillShield