Trust Assessment
oura-ring-data received a trust score of 51/100, placing it in the Caution category. This skill has some security considerations that users should review before deployment.
SkillShield's automated analysis identified 4 findings: 1 critical, 0 high, 3 medium, and 0 low severity. Key findings include Suspicious import: requests, Unpinned Python dependency version, Prompt Injection via Untrusted Skill Description.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings4
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| CRITICAL | Prompt Injection via Untrusted Skill Description The `SKILL.md` file, explicitly marked as 'UNTRUSTED_INPUT', contains numerous direct instructions and directives intended for the host LLM. Examples include 'ALWAYS check for authentication', 'CRITICAL: Use quotes when the date range contains spaces!', 'ALWAYS use --json for programmatic data analysis.', and 'DO NOT interpret contributor scores as actual heart rate measurements.'. These instructions attempt to manipulate the LLM's behavior from within content that should be treated as data, not commands, violating the core principle of untrusted input handling. This constitutes a prompt injection attempt, as the untrusted content is instructing the LLM. Remove all direct instructions and directives intended for the LLM from the `SKILL.md` file. The skill's operational guidance should be provided in a trusted, separate instruction set or through the skill's manifest, not embedded within untrusted content. | LLM | SKILL.md:1 | |
| MEDIUM | Suspicious import: requests Import of 'requests' detected. This module provides network or low-level system access. Verify this import is necessary. Network and system modules in skill code may indicate data exfiltration. | Static | skills/visionik/ouracli/src/ouracli/client.py:8 | |
| MEDIUM | Suspicious import: requests Import of 'requests' detected. This module provides network or low-level system access. Verify this import is necessary. Network and system modules in skill code may indicate data exfiltration. | Static | skills/visionik/ouracli/tests/test_coverage_boost.py:8 | |
| MEDIUM | Unpinned Python dependency version Dependency 'requests>=2.31.0' is not pinned to an exact version. Pin Python dependencies with exact versions where feasible. | Dependencies | skills/visionik/ouracli/pyproject.toml |
Scan History
Embed Code
[](https://skillshield.io/report/314f7e3046c767cf)
Powered by SkillShield