Trust Assessment
google-news-api received a trust score of 79/100, placing it in the Mostly Trusted category. This skill has passed most security checks with only minor considerations noted.
SkillShield's automated analysis identified 3 findings: 0 critical, 1 high, 1 medium, and 0 low severity. Key findings include Suspicious import: requests, Potential shell command injection via unescaped arguments, Unpinned third-party dependencies.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 14, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings3
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| HIGH | Potential shell command injection via unescaped arguments The skill's recommended execution pattern involves constructing a shell command with user-provided arguments (e.g., 'Keywords', 'TimeRange', 'Count'). If the host LLM directly substitutes user input into this command string without proper shell escaping, a malicious user could inject arbitrary shell commands. For example, if 'Keywords' contains a double quote followed by a semicolon and another command (e.g., `" ; rm -rf / #`), it could break out of the quoted argument and execute the injected command on the underlying system. The host LLM should ensure all user-provided arguments are properly shell-escaped before being passed to the `python` command. Alternatively, the skill could provide a more robust execution mechanism that doesn't rely on direct shell command construction with user input, such as a dedicated API call or a Python function that takes arguments directly. | LLM | SKILL.md:59 | |
| MEDIUM | Suspicious import: requests Import of 'requests' detected. This module provides network or low-level system access. Verify this import is necessary. Network and system modules in skill code may indicate data exfiltration. | Static | skills/phheng/google-news-api/scripts/google_news_api.py:3 | |
| INFO | Unpinned third-party dependencies The skill's Python script uses the 'requests' library but does not specify a version in a 'requirements.txt' or similar file. This can lead to non-deterministic builds and potential supply chain risks if a future version of the dependency introduces vulnerabilities or breaking changes, or if a dependency confusion attack were to occur. While 'requests' is a widely used and trusted library, explicit version pinning is a best practice for security and stability. Add a 'requirements.txt' file to the skill package, specifying the exact version of 'requests' (e.g., 'requests==2.28.1') and any other third-party dependencies. Ensure the skill's execution environment installs dependencies from this file. | LLM | scripts/google_news_api.py:1 |
Scan History
Embed Code
[](https://skillshield.io/report/ddac9dde2ec50f75)
Powered by SkillShield