Trust Assessment
free-voice received a trust score of 66/100, placing it in the Caution category. This skill has some security considerations that users should review before deployment.
SkillShield's automated analysis identified 2 findings: 1 critical, 0 high, 1 medium, and 0 low severity. Key findings include Missing required field: name, Direct shell command execution.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 14, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings2
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| CRITICAL | Direct shell command execution The skill explicitly states it will execute a shell command (`cmd /c start`) to launch ComfyUI if it's not running. This capability allows for arbitrary command execution if the path to the `.lnk` file or the command itself could be manipulated, or if the `.lnk` file itself were compromised. Even without external manipulation, the skill itself is designed to execute a shell command, which is a high-risk operation as it bypasses typical sandboxing mechanisms. Avoid direct shell command execution. If an external application needs to be launched, use a more secure, sandboxed method or rely on the user to ensure the application is running. If absolutely necessary, ensure the command and its arguments are strictly controlled and not influenced by untrusted input. Consider using platform-specific APIs for launching applications instead of shell commands. | LLM | SKILL.md:15 | |
| MEDIUM | Missing required field: name The 'name' field is required for claude_code skills but is missing from frontmatter. Add a 'name' field to the SKILL.md frontmatter. | Static | skills/onimka/free-voice/SKILL.md:1 |
Scan History
Embed Code
[](https://skillshield.io/report/dd53bcc52c3344ef)
Powered by SkillShield