Trust Assessment
lnbits received a trust score of 73/100, placing it in the Caution category. This skill has some security considerations that users should review before deployment.
SkillShield's automated analysis identified 3 findings: 0 critical, 1 high, 2 medium, and 0 low severity. Key findings include Suspicious import: urllib.request, Unpinned dependency `qrcode[pil]`, LNbits Admin Key exposed in CLI output.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings3
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| HIGH | LNbits Admin Key exposed in CLI output The `create_wallet` command in `scripts/lnbits_cli.py` (line 203) outputs the sensitive `adminkey` directly to stdout as part of its JSON response. While the `SKILL.md` explicitly instructs the LLM to 'NEVER Expose Secrets' and not to repeat this key in chat, its presence in the tool's raw output creates a significant credential harvesting and data exfiltration risk. A compromised or misconfigured LLM, or a successful prompt injection, could lead to the `adminkey` being inadvertently exfiltrated to the user or other systems. Modify `scripts/lnbits_cli.py` to redact or not return the `adminkey` in its stdout output for the `create_wallet` command. Instead, consider writing it to a secure, local file with restricted permissions, or returning a reference/ID that the user can use to retrieve it securely out-of-band. If direct output is unavoidable, ensure the LLM is robustly trained and instructed to filter this specific output before presenting it to the user. | LLM | scripts/lnbits_cli.py:203 | |
| MEDIUM | Suspicious import: urllib.request Import of 'urllib.request' detected. This module provides network or low-level system access. Verify this import is necessary. Network and system modules in skill code may indicate data exfiltration. | Static | skills/jamestsetsekas/lnbits-with-qrcode/scripts/lnbits_cli.py:9 | |
| MEDIUM | Unpinned dependency `qrcode[pil]` The skill's manifest specifies the `qrcode[pil]` dependency without a version pin. This can lead to supply chain risks, including unexpected behavior, compatibility issues, or security vulnerabilities if a future version introduces breaking changes or malicious code. It makes the build non-deterministic. Pin the `qrcode[pil]` dependency to a specific, known-good version (e.g., `"qrcode[pil]==7.4.2"` or `"qrcode[pil]~=7.4"`) in the skill's manifest. | LLM | SKILL.md:1 |
Scan History
Embed Code
[](https://skillshield.io/report/52aa15ef10a00ce7)
Powered by SkillShield