Trust Assessment
evernote received a trust score of 73/100, placing it in the Caution category. This skill has some security considerations that users should review before deployment.
SkillShield's automated analysis identified 2 findings: 0 critical, 2 high, 0 medium, and 0 low severity. Key findings include Potential Data Exfiltration via Unvalidated Base URL.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings2
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| HIGH | Potential Data Exfiltration via Unvalidated Base URL The skill constructs API requests using the `EVERNOTE_BASE` environment variable. If an attacker can manipulate this variable to point to a malicious server, the `EVERNOTE_ACCESS_TOKEN` (which is also used in the Authorization header) could be exfiltrated to the attacker's controlled endpoint. The skill does not validate the `EVERNOTE_BASE` URL, making it vulnerable to redirection if the environment variable is compromised. Implement strict validation for the `EVERNOTE_BASE` environment variable to ensure it points only to official Evernote domains (e.g., `*.evernote.com`). Alternatively, hardcode the base URL if it's not intended to be configurable, or ensure the execution environment prevents untrusted modification of this variable. | LLM | SKILL.md:12 | |
| HIGH | Potential Data Exfiltration via Unvalidated Base URL The skill constructs API requests using the `EVERNOTE_BASE` environment variable. If an attacker can manipulate this variable to point to a malicious server, the `EVERNOTE_ACCESS_TOKEN` (which is also used in the Authorization header) could be exfiltrated to the attacker's controlled endpoint. The skill does not validate the `EVERNOTE_BASE` URL, making it vulnerable to redirection if the environment variable is compromised. Implement strict validation for the `EVERNOTE_BASE` environment variable to ensure it points only to official Evernote domains (e.g., `*.evernote.com`). Alternatively, hardcode the base URL if it's not intended to be configurable, or ensure the execution environment prevents untrusted modification of this variable. | LLM | SKILL.md:17 |
Scan History
Embed Code
[](https://skillshield.io/report/858fa917e0b62d00)
Powered by SkillShield