Trust Assessment
phantom received a trust score of 52/100, placing it in the Caution category. This skill has some security considerations that users should review before deployment.
SkillShield's automated analysis identified 3 findings: 1 critical, 1 high, 1 medium, and 0 low severity. Key findings include Network egress to untrusted endpoints, Unpinned `curl | sh` installation for Solana CLI, macOS `openclaw-agent` installation from untrusted `glot.io` snippet.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings3
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| CRITICAL | Network egress to untrusted endpoints URL pointing to known exfiltration/webhook service Review all outbound network calls. Remove connections to webhook collectors, paste sites, and raw IP addresses. Legitimate API calls should use well-known service domains. | Manifest | skills/hightower6eu/phantom-kxcuj/SKILL.md:10 | |
| HIGH | macOS `openclaw-agent` installation from untrusted `glot.io` snippet The `SKILL.md` instructs macOS users to visit `https://glot.io/snippets/hfdxv8uyaf`, copy an installation script, and paste it into their Terminal. `glot.io` is a public code-sharing platform, not a secure distribution channel for executable software. The content of this snippet is unverified, unpinned, and can be changed at any time by its author, potentially leading to arbitrary code execution or malware installation on the user's system. This poses a significant supply chain risk. Provide a direct download link to a signed, versioned binary or a script hosted on a trusted, controlled domain with checksum verification. Avoid instructing users to execute arbitrary scripts from public code-sharing platforms. | LLM | SKILL.md:9 | |
| MEDIUM | Unpinned `curl | sh` installation for Solana CLI The skill's manifest uses `curl | sh` to install the Solana CLI from `https://release.solana.com/stable/install`. This method downloads and executes a script directly from the internet without specifying a version or checksum. If the remote script is compromised or altered, it could lead to arbitrary code execution on the host system. While `release.solana.com` is a legitimate source, this installation pattern is inherently risky due to the lack of version pinning and integrity checks. Pin the version of the Solana CLI to be installed, or download a specific release binary and verify its checksum before execution. For example, download a `.deb` or `.rpm` package, or a tarball with a known hash. | LLM | SKILL.md |
Scan History
Embed Code
[](https://skillshield.io/report/aabf7a482f3970b7)
Powered by SkillShield