Security Audit

idea-coach

github.com/openclaw/skills

AI SkillCommit 13146e6a3d46

CAUTION

Scanned about 2 months ago

Critical

Immediate action required

High

Priority fixes suggested

Medium

Best practices review

Low

Acknowledged / Tracked

Trust Assessment

idea-coach received a trust score of 55/100, placing it in the Caution category. This skill has some security considerations that users should review before deployment.

SkillShield's automated analysis identified 3 findings: 1 critical, 1 high, 0 medium, and 0 low severity. Key findings include Arbitrary command execution, Dangerous call: subprocess.run(), Skill leverages broad GitHub CLI permissions.

The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.

Last analyzed on February 14, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.

Layer Breakdown

Manifest Analysis

70%

Static Code Analysis

85%

Dependency Graph

100%

LLM Behavioral Safety

100%

Behavioral Risk Signals

Shell Execution

2 findings

Excessive Permissions

1 finding

Security Findings3

Severity	Finding	Layer	Location
CRITICAL	Arbitrary command execution Python shell execution (os.system, subprocess) Review all shell execution calls. Ensure commands are static (not built from user input), use absolute paths, and are strictly necessary. Prefer library APIs over shell commands.	Manifest	skills/udiedrichsen/idea-coach/scripts/coach.py:275
HIGH	Dangerous call: subprocess.run() Call to 'subprocess.run()' detected in function 'run_gh_command'. This can execute arbitrary code. Avoid using dangerous functions like exec/eval/os.system. Use safer alternatives.	Static	skills/udiedrichsen/idea-coach/scripts/coach.py:275
INFO	Skill leverages broad GitHub CLI permissions The skill integrates with the GitHub CLI (`gh`), which requires prior authentication by the user. This grants the skill the ability to perform actions on GitHub (e.g., create repositories, issues, link to existing repos) with the full scope of the authenticated `gh` CLI token. While this is central to the skill's advertised functionality and explicitly stated in the `SKILL.md` prerequisites, users should be aware that the skill operates with potentially broad GitHub permissions. No direct code remediation is needed as this is a functional requirement. Ensure clear user disclosure about the required GitHub CLI permissions and their implications is provided in the skill's documentation.	LLM	scripts/coach.py:50

Scan History

Embed Code

[![SkillShield](https://skillshield.io/api/v1/badge/baa647dfa31ac99a.svg)](https://skillshield.io/report/baa647dfa31ac99a)