Trust Assessment
evenrealities-tracker received a trust score of 98/100, placing it in the Trusted category. This skill has passed all critical security checks and demonstrates strong security practices.
SkillShield's automated analysis identified 1 finding: 0 critical, 0 high, 0 medium, and 1 low severity. Key findings include Unpinned Dependency Version.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 12, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings1
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| LOW | Unpinned Dependency Version The `requirements.txt` file specifies `playwright>=1.40.0`. While a minimum version is set, not pinning to an exact version (e.g., `playwright==1.40.0`) can introduce supply chain risks. Future versions of the dependency might introduce breaking changes, new vulnerabilities, or unexpected behavior without explicit review. Pin the dependency to an exact version, for example, `playwright==1.40.0`. Regularly review and update pinned dependencies to incorporate security fixes and new features in a controlled manner. | LLM | requirements.txt:3 |
Scan History
Embed Code
[](https://skillshield.io/report/09a3c852d511f670)
Powered by SkillShield