Trust Assessment
polymarket-btc15m received a trust score of 68/100, placing it in the Caution category. This skill has some security considerations that users should review before deployment.
SkillShield's automated analysis identified 4 findings: 0 critical, 1 high, 3 medium, and 0 low severity. Key findings include Unpinned npm dependency version, Broad Command Execution Permissions, Automated Post-Install Script Execution.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings4
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| HIGH | Broad Command Execution Permissions The skill explicitly requires the execution environment to allow `npm` and `node` commands from the project directory. This grants the skill the ability to execute arbitrary code on the host system. While necessary for Node.js skills, it represents a significant attack surface. If the skill's internal scripts or any of its dependencies contain vulnerabilities (e.g., command injection, malicious code), these broad permissions could be exploited to compromise the host system. Implement strict sandboxing or containerization for skill execution. Ensure all skill scripts are thoroughly audited for command injection vulnerabilities. Limit the scope of execution permissions to the absolute minimum required. | LLM | SKILL.md:100 | |
| MEDIUM | Unpinned npm dependency version Dependency 'dotenv' is not pinned to an exact version ('^16.4.5'). Pin dependencies to exact versions to reduce drift and supply-chain risk. | Dependencies | skills/krajekisbtc/polymarketbtcskill/package.json | |
| MEDIUM | Automated Post-Install Script Execution The `package.json` defines a `postinstall` script (`node scripts/shrink-node-modules.js`) which executes automatically after `npm install`. While the provided `shrink-node-modules.js` appears benign (it cleans up `node_modules`), any script executed automatically during installation poses a supply chain risk. A malicious `postinstall` script in a compromised dependency or the skill itself could execute arbitrary code without explicit user invocation beyond the initial `npm install`. Avoid `postinstall` scripts where possible. If essential, ensure the script is minimal, thoroughly audited, and its functionality is strictly limited. Consider using a package manager that allows disabling post-install scripts by default or provides better sandboxing. | LLM | package.json:9 | |
| MEDIUM | Direct Handling of Wallet Private Key The skill requires the `POLYMARKET_PRIVATE_KEY` environment variable, which contains a sensitive wallet private key. While the documentation warns against logging or exposing it, the direct handling of such a critical credential by the skill code introduces an inherent risk. Any vulnerability in the skill's code (e.g., accidental logging, improper memory handling, or transmission to an untrusted endpoint) could lead to credential harvesting and compromise of the associated wallet. Implement robust secret management practices. Ensure the private key is accessed only when strictly necessary and never logged or stored persistently. Consider using hardware security modules (HSMs) or secure enclaves for private key operations if available, or at least ensure strong encryption at rest and in transit. Minimize the attack surface for code handling the private key. | LLM | SKILL.md:39 |
Scan History
Embed Code
[](https://skillshield.io/report/a6bede9d4a4bd03b)
Powered by SkillShield