Trust Assessment
patent-assistant received a trust score of 65/100, placing it in the Caution category. This skill has some security considerations that users should review before deployment.
SkillShield's automated analysis identified 2 findings: 1 critical, 0 high, 1 medium, and 0 low severity. Key findings include Suspicious import: urllib.request, Potential Command Injection via user-controlled arguments to `patent_search.py`.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings2
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| CRITICAL | Potential Command Injection via user-controlled arguments to `patent_search.py` The `SKILL.md` explicitly instructs the LLM to execute the `scripts/patent_search.py` tool using user-provided keywords (e.g., `[技术关键词或交底书内容]`). If the LLM directly interpolates untrusted user input into the shell command without proper shell escaping, an attacker could inject arbitrary shell commands. For example, if the user input for `关键词` is `foo"; rm -rf /; echo "`, the resulting command executed by the shell would be `python scripts/patent_search.py "foo"; rm -rf /; echo "" -s all -p`, leading to arbitrary code execution. The LLM should be instructed to use a robust shell escaping mechanism (e.g., `shlex.quote` in Python) for any user-provided input before constructing and executing shell commands. This ensures that malicious characters in the input are treated as literal strings rather than shell commands. Alternatively, consider passing user input via environment variables or stdin if the script supports it, to bypass shell interpretation entirely. | LLM | SKILL.md:50 | |
| MEDIUM | Suspicious import: urllib.request Import of 'urllib.request' detected. This module provides network or low-level system access. Verify this import is necessary. Network and system modules in skill code may indicate data exfiltration. | Static | skills/ty-teo/patent-assistant/scripts/patent_search.py:12 |
Scan History
Embed Code
[](https://skillshield.io/report/a3560440e0a444c6)
Powered by SkillShield