Trust Assessment
english-learn-cards received a trust score of 65/100, placing it in the Caution category. This skill has some security considerations that users should review before deployment.
SkillShield's automated analysis identified 2 findings: 1 critical, 0 high, 1 medium, and 0 low severity. Key findings include Suspicious import: requests, Prompt Injection via Unsanitized Database Content.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings2
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| CRITICAL | Prompt Injection via Unsanitized Database Content The `render_card_markdown` function constructs markdown output for the LLM by directly embedding user-controlled text fields (e.g., `headword`, `definition_en`, `examples_json`, `notes`) retrieved from the SQLite database. An attacker can use the `add` command to store malicious instructions or markdown into these fields. When the `render` command is subsequently executed, this unsanitized content is presented to the LLM, allowing for prompt injection attacks that could manipulate the LLM's behavior, exfiltrate data, or bypass safety mechanisms. Implement robust sanitization or escaping of all user-provided text fields before they are stored in the database and, critically, before they are embedded into the markdown output that will be presented to the LLM. This could involve using a markdown-escaping library, filtering for known prompt injection keywords/patterns, or enclosing user-generated content within specific delimiters that the LLM is instructed to treat as literal text. | LLM | scripts/words.py:500 | |
| MEDIUM | Suspicious import: requests Import of 'requests' detected. This module provides network or low-level system access. Verify this import is necessary. Network and system modules in skill code may indicate data exfiltration. | Static | skills/racymind/english-learn-cards/scripts/words.py:49 |
Scan History
Embed Code
[](https://skillshield.io/report/37b17edf21ed0892)
Powered by SkillShield