Trust Assessment
expanso-json-to-yaml received a trust score of 83/100, placing it in the Mostly Trusted category. This skill has passed most security checks with only minor considerations noted.
SkillShield's automated analysis identified 3 findings: 0 critical, 0 high, 3 medium, and 0 low severity. Key findings include Missing required field: name, Unpinned Dependency Installation, Hardcoded Remote Deployment URL.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 14, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings3
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| MEDIUM | Missing required field: name The 'name' field is required for claude_code skills but is missing from frontmatter. Add a 'name' field to the SKILL.md frontmatter. | Static | skills/aronchick/expanso-json-to-yaml/SKILL.md:1 | |
| MEDIUM | Unpinned Dependency Installation The skill instructs users to install 'expanso-edge' using 'clawhub install expanso-edge' without specifying a version. This can lead to supply chain risks if a malicious or incompatible version of 'expanso-edge' is published, as users would automatically install the latest version. Specify a precise version for 'expanso-edge' during installation, e.g., 'clawhub install expanso-edge@1.2.3', or recommend using a lock file mechanism if available for 'clawhub'. | LLM | SKILL.md:9 | |
| MEDIUM | Hardcoded Remote Deployment URL The skill provides a hardcoded URL for deploying the pipeline to Expanso Cloud. If the remote server 'skills.expanso.io' were compromised, a malicious version of the pipeline could be deployed to users following these instructions, leading to a supply chain attack. While common for official deployments, consider adding a verification step (e.g., checksum) or a warning about verifying the source when deploying from remote URLs. For critical applications, self-hosting or private registries might be preferred. | LLM | SKILL.md:22 |
Scan History
Embed Code
[](https://skillshield.io/report/eae939d591b85c1c)
Powered by SkillShield