93
TRUSTED0
Critical
Immediate action required
0
High
Priority fixes suggested
1
Medium
Best practices review
0
Low
Acknowledged / Tracked
Trust Assessment
pocketsmith received a trust score of 93/100, placing it in the Trusted category. This skill has passed all critical security checks and demonstrates strong security practices.
SkillShield's automated analysis identified 1 finding: 0 critical, 0 high, 1 medium, and 0 low severity. Key findings include Unpinned Python dependency version.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Manifest Analysis
100%Static Code Analysis
100%Dependency Graph
93%LLM Behavioral Safety
100%Behavioral Risk Signals
Network Access
1 finding
Security Findings1
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| MEDIUM | Unpinned Python dependency version Dependency 'httpx>=0.27.0' is not pinned to an exact version. Pin Python dependencies with exact versions where feasible. | Dependencies | skills/lextoumbourou/pocketsmith-skill/pyproject.toml |
Scan History
Embed Code
[](https://skillshield.io/report/5f134cbf9b7d5fc5)
Powered by SkillShield