Trust Assessment
npm-search received a trust score of 82/100, placing it in the Mostly Trusted category. This skill has passed most security checks with only minor considerations noted.
SkillShield's automated analysis identified 2 findings: 0 critical, 1 high, 1 medium, and 0 low severity. Key findings include Potential Command Injection via User Input, Untrusted Custom Binary Dependency.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings2
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| HIGH | Potential Command Injection via User Input The skill's primary command `bash scripts/npmsearch "<query>"` directly embeds user-controlled input (`<query>`) into a shell command. If the `scripts/npmsearch` script does not properly sanitize or escape this input, a malicious user could inject arbitrary shell commands, leading to remote code execution. Ensure that the `scripts/npmsearch` script rigorously sanitizes and escapes all user-provided input before using it in shell commands. Prefer passing arguments as separate elements to `exec` functions rather than concatenating them into a single command string. Alternatively, use a safer method like environment variables for passing complex user input. | LLM | skill.md:12 | |
| MEDIUM | Untrusted Custom Binary Dependency The skill requires `npm-search-mcp-server`, which appears to be a custom binary. Without access to its source code or a trusted distribution channel, its security posture cannot be verified. This introduces a supply chain risk, as a malicious or vulnerable custom binary could compromise the agent or host system. Provide the source code for `npm-search-mcp-server` for review, or ensure it is obtained from a trusted, verified source. Implement integrity checks (e.g., checksums) for custom binaries. Document the purpose and security considerations of this custom dependency. | LLM | skill.md:20 |
Scan History
Embed Code
[](https://skillshield.io/report/6f27954de97c4f48)
Powered by SkillShield