Trust Assessment
csdn-publisher received a trust score of 51/100, placing it in the Caution category. This skill has some security considerations that users should review before deployment.
SkillShield's automated analysis identified 3 findings: 1 critical, 1 high, 1 medium, and 0 low severity. Key findings include Network egress to untrusted endpoints, Browser sandbox disabled, Unpinned npm dependency 'ws'.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings3
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| CRITICAL | Network egress to untrusted endpoints HTTP request to raw IP address Review all outbound network calls. Remove connections to webhook collectors, paste sites, and raw IP addresses. Legitimate API calls should use well-known service domains. | Manifest | skills/c4chuan/csdn-publisher/scripts/inject-content.js:57 | |
| HIGH | Browser sandbox disabled The skill explicitly configures the browser tool with `noSandbox: true`. Disabling Chrome's sandbox significantly increases the attack surface and makes the browser highly vulnerable to exploits. If the browser navigates to or renders malicious content (e.g., via an XSS vulnerability on CSDN or a prompt injection leading to arbitrary URL navigation), it could lead to host system compromise. Remove `"noSandbox": true` from the browser configuration. If disabling the sandbox is strictly necessary, document the specific security mitigations in place to prevent arbitrary code execution and ensure all navigated URLs are strictly controlled and validated. | LLM | SKILL.md:179 | |
| MEDIUM | Unpinned npm dependency 'ws' The skill installs the `ws` npm package using `npm install ws` without specifying a version. This makes the skill vulnerable to supply chain attacks, where a malicious version of the `ws` package could be installed if an attacker compromises the package registry or publishes a higher-versioned malicious package. Pin the `ws` dependency to a specific, known-good version (e.g., `npm install ws@^8.0.0` or `npm install ws@8.x.x`) to prevent unexpected or malicious package updates. | LLM | SKILL.md:200 |
Scan History
Embed Code
[](https://skillshield.io/report/34b422f792a0cbb9)
Powered by SkillShield