Trust Assessment
data-transform-gen received a trust score of 65/100, placing it in the Caution category. This skill has some security considerations that users should review before deployment.
SkillShield's automated analysis identified 2 findings: 1 critical, 0 high, 1 medium, and 0 low severity. Key findings include Unpinned npm dependency version, Unsanitized user input directly embedded in LLM prompt.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings2
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| CRITICAL | Unsanitized user input directly embedded in LLM prompt The `input` argument, which originates from unsanitized command-line input provided by the user (`<transformation>`), is directly concatenated into the `userContent` string for the OpenAI API call. This allows an attacker to inject arbitrary instructions into the Large Language Model's prompt. A malicious user could craft the input to override system instructions, manipulate the LLM's behavior, attempt to extract sensitive information from the LLM's context, or generate malicious code (e.g., code for data exfiltration or command execution) that the user might then execute. Implement robust input sanitization or, preferably, use a structured prompt approach. Instead of direct string concatenation, pass user input as a distinct message with a specific role (e.g., `user` role) or use clear delimiters that the LLM is explicitly instructed to treat as data, not instructions. The system prompt should also reinforce that the user's input is solely a description of the desired transformation. | LLM | src/index.ts:9 | |
| MEDIUM | Unpinned npm dependency version Dependency 'commander' is not pinned to an exact version ('^12.1.0'). Pin dependencies to exact versions to reduce drift and supply-chain risk. | Dependencies | skills/lxgicstudios/data-transform-gen/package.json |
Scan History
Embed Code
[](https://skillshield.io/report/a140206162fcd8d0)
Powered by SkillShield