Trust Assessment
norway-roads received a trust score of 66/100, placing it in the Caution category. This skill has some security considerations that users should review before deployment.
SkillShield's automated analysis identified 2 findings: 1 critical, 0 high, 1 medium, and 0 low severity. Key findings include Suspicious import: urllib.request, Potential Command Injection via Shell Execution.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 14, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings2
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| CRITICAL | Potential Command Injection via Shell Execution The skill's usage examples in `SKILL.md` demonstrate direct execution of a Python script via a shell command (`./scripts/query_roads.py`) with user-controlled arguments (`--from`, `--to`, `--road`). If the host LLM directly interpolates user input into this shell command string without proper escaping or sanitization, an attacker could inject arbitrary shell commands. For example, providing input like `Oslo; rm -rf /;` for the `--from` argument could lead to arbitrary code execution on the host system. The host LLM should ensure that any user-provided arguments passed to shell commands are properly escaped or sanitized to prevent shell metacharacter injection. Alternatively, consider using a more robust command execution mechanism that does not involve direct shell string interpolation, such as passing arguments directly to the Python interpreter (e.g., `python3 scripts/query_roads.py --from {user_input}`) or using a dedicated tool execution framework that handles argument parsing securely. | LLM | SKILL.md:10 | |
| MEDIUM | Suspicious import: urllib.request Import of 'urllib.request' detected. This module provides network or low-level system access. Verify this import is necessary. Network and system modules in skill code may indicate data exfiltration. | Static | skills/geoffreycasaubon/norway-roads/scripts/query_roads.py:9 |
Scan History
Embed Code
[](https://skillshield.io/report/fb74c2c2e4f00121)
Powered by SkillShield