Trust Assessment
pluribus received a trust score of 69/100, placing it in the Caution category. This skill has some security considerations that users should review before deployment.
SkillShield's automated analysis identified 4 findings: 0 critical, 1 high, 2 medium, and 1 low severity. Key findings include Missing required field: name, Sensitive environment variable access: $HOME, Node lockfile missing.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 14, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings4
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| HIGH | Accesses Moltbook credentials file The `init.sh` script attempts to read `~/.config/moltbook/credentials.json` to extract the agent name. This file is highly likely to contain sensitive credentials (e.g., API keys, tokens) for Moltbook. While the script only extracts the `agent_name` field, accessing a known credentials file poses a significant security risk as it demonstrates the capability to read sensitive data. A malicious actor could modify the script to exfiltrate the entire file, leading to credential compromise. Avoid direct reading of credential files. If the agent name is required, it should be provided through secure environment variables, a dedicated configuration API, or by leveraging Moltbook's own secure methods for retrieving agent identity without exposing the raw credentials file. If direct file access is unavoidable, ensure the file path is strictly controlled and its contents are handled with extreme care, ideally by a dedicated credential management tool. | LLM | scripts/init.sh:14 | |
| MEDIUM | Missing required field: name The 'name' field is required for claude_code skills but is missing from frontmatter. Add a 'name' field to the SKILL.md frontmatter. | Static | skills/tanchunsiong/pluribus/SKILL.md:1 | |
| MEDIUM | Sensitive environment variable access: $HOME Access to sensitive environment variable '$HOME' detected in shell context. Verify this environment variable access is necessary and the value is not exfiltrated. | Static | skills/tanchunsiong/pluribus/scripts/init.sh:4 | |
| LOW | Node lockfile missing package.json is present but no lockfile was found (package-lock.json, pnpm-lock.yaml, or yarn.lock). Commit a lockfile for deterministic dependency resolution. | Dependencies | skills/tanchunsiong/pluribus/package.json |
Scan History
Embed Code
[](https://skillshield.io/report/c919c4bac914b52c)
Powered by SkillShield