Trust Assessment
google-drive received a trust score of 100/100, placing it in the Trusted category. This skill has passed all critical security checks and demonstrates strong security practices.
SkillShield's automated analysis identified 1 finding: 0 critical, 0 high, 0 medium, and 0 low severity. Key findings include External CLI dependency.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings1
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| INFO | External CLI dependency The skill documentation states a prerequisite for `OpenClawCLI` to be installed from an external URL (`https://openclawcli.vercel.app/`). This introduces an unmanaged external dependency, which could pose a supply chain risk if the CLI itself were compromised or if its installation process is insecure. The skill package does not directly manage or verify this dependency. Consider providing a hash or specific version for the required CLI, or integrating its functionality directly if feasible, to reduce reliance on external, unversioned executables. Alternatively, provide clear instructions on how to verify the authenticity of the CLI. | LLM | SKILL.md:5 |
Scan History
Embed Code
[](https://skillshield.io/report/5a7f0b9bb4f57759)
Powered by SkillShield