Trust Assessment
discord received a trust score of 79/100, placing it in the Mostly Trusted category. This skill has passed most security checks with only minor considerations noted.
SkillShield's automated analysis identified 2 findings: 0 critical, 1 high, 1 medium, and 0 low severity. Key findings include Missing required field: name, Local file exfiltration via mediaUrl parameter.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings2
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| HIGH | Local file exfiltration via mediaUrl parameter The `discord` skill explicitly supports local file paths via the `file:///` scheme for the `mediaUrl` parameter in actions such as `emojiUpload`, `stickerUpload`, and `sendMessage`. If an attacker can control the `mediaUrl` parameter, they could instruct the bot to read and upload arbitrary local files from the host system to Discord, leading to data exfiltration. This is a significant risk as it allows access to files outside the intended scope of the skill. 1. **Strict Path Validation:** Implement robust validation for `mediaUrl` to ensure that `file:///` paths are restricted to a very specific, isolated, and temporary directory managed by the bot, or disallow arbitrary `file:///` paths from untrusted input entirely. 2. **Input Sanitization:** Thoroughly sanitize any user-provided `mediaUrl` to prevent directory traversal (`../`) or other path manipulation attacks. 3. **Least Privilege:** Ensure the underlying bot process runs with the absolute minimum file system permissions necessary to limit the impact of any successful file access. 4. **Feature Control:** If local file uploads are not a critical feature, consider disabling this capability or making it an opt-in feature with strict access controls. | LLM | SKILL.md:30 | |
| MEDIUM | Missing required field: name The 'name' field is required for claude_code skills but is missing from frontmatter. Add a 'name' field to the SKILL.md frontmatter. | Static | skills/steipete/discord/SKILL.md:1 |
Scan History
Embed Code
[](https://skillshield.io/report/abeb53cb2105c916)
Powered by SkillShield