Trust Assessment
docx-manipulation received a trust score of 80/100, placing it in the Mostly Trusted category. This skill has passed most security checks with only minor considerations noted.
SkillShield's automated analysis identified 2 findings: 0 critical, 1 high, 1 medium, and 0 low severity. Key findings include Broad 'code_execution' and 'file_operations' permissions, Unpinned dependency in installation instructions.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings2
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| HIGH | Broad 'code_execution' and 'file_operations' permissions The skill's manifest declares 'code_execution' and 'file_operations' tools. While these are necessary for the skill's stated purpose (generating and executing Python code to manipulate documents), their combination grants the ability to read and write arbitrary files on the host system via generated code. This could be exploited by a malicious prompt to exfiltrate sensitive data or introduce malicious files outside the intended scope of document manipulation. Implement strict sandboxing for 'code_execution' and 'file_operations' to limit access to specific directories or file types. Clearly document these limitations to the user. Consider if 'file_operations' can be scoped more narrowly (e.g., only to a temporary working directory or user-provided files). | LLM | SKILL.md | |
| MEDIUM | Unpinned dependency in installation instructions The installation instruction `pip install python-docx` does not specify a version. This means that if a malicious version of `python-docx` were published to PyPI, it could be installed, introducing a supply chain vulnerability. It's best practice to pin dependencies to specific, known-good versions. Pin the dependency to a specific, known-good version (e.g., `pip install python-docx==0.8.11`) or use a `requirements.txt` file with pinned versions and hashes. | LLM | SKILL.md:300 |
Scan History
Embed Code
[](https://skillshield.io/report/728576bf33a1708e)
Powered by SkillShield