Trust Assessment
double729-plansuite received a trust score of 79/100, placing it in the Mostly Trusted category. This skill has passed most security checks with only minor considerations noted.
SkillShield's automated analysis identified 2 findings: 0 critical, 1 high, 1 medium, and 0 low severity. Key findings include Missing required field: name, Untrusted skill instructs use of arbitrary command execution tool.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings2
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| HIGH | Untrusted skill instructs use of arbitrary command execution tool The untrusted skill explicitly instructs the agent to use `sessions_spawn` to "开一个隔离执行会话" (open an isolated execution session). `sessions_spawn` is a tool that allows for arbitrary command execution. If the agent follows this instruction and passes untrusted input (e.g., from user-provided plans, generated content, or the `task_plan.md` file itself) to `sessions_spawn` without proper sanitization, it could lead to command injection, allowing an attacker to execute arbitrary commands on the host system. Agents should carefully sanitize all inputs passed to execution tools like `sessions_spawn`. The use of `sessions_spawn` should be restricted to trusted, predefined commands or require explicit user confirmation for any dynamic command execution. Consider sandboxing or limiting the capabilities of the spawned session to minimize potential impact. | LLM | SKILL.md:29 | |
| MEDIUM | Missing required field: name The 'name' field is required for claude_code skills but is missing from frontmatter. Add a 'name' field to the SKILL.md frontmatter. | Static | skills/double729/double729-plansuite/SKILL.md:1 |
Scan History
Embed Code
[](https://skillshield.io/report/2b55b8bdefd5678f)
Powered by SkillShield