Trust Assessment
marketing-skills received a trust score of 65/100, placing it in the Caution category. This skill has some security considerations that users should review before deployment.
SkillShield's automated analysis identified 2 findings: 1 critical, 0 high, 1 medium, and 0 low severity. Key findings include Missing required field: name, Untrusted instructions dictate LLM behavior.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings2
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| CRITICAL | Untrusted instructions dictate LLM behavior The entire `SKILL.md` content, which contains explicit instructions for the host LLM on how to process requests and generate outputs (e.g., 'Identify the module', 'Read the corresponding file', 'Apply the framework', 'Output rules'), is marked as untrusted input. Following these instructions means the LLM's operational directives are being dictated by untrusted content, which is a direct form of prompt injection. The 'RUBRIC MODE' note states to flag issues if the skill explicitly instructs execution, and this skill explicitly instructs the LLM on its operational flow. Ensure that instructions intended for the host LLM's behavior are not sourced from untrusted input. If the skill's purpose is to provide these instructions, the `SKILL.md` itself should not be marked as untrusted. Alternatively, the system should be designed to sanitize or ignore behavioral instructions from untrusted sources when they originate from untrusted content. | LLM | SKILL.md:1 | |
| MEDIUM | Missing required field: name The 'name' field is required for claude_code skills but is missing from frontmatter. Add a 'name' field to the SKILL.md frontmatter. | Static | skills/jchopard69/marketing-skills/SKILL.md:1 |
Scan History
Embed Code
[](https://skillshield.io/report/58500213feeb1291)
Powered by SkillShield