Trust Assessment
proc-monitor received a trust score of 83/100, placing it in the Mostly Trusted category. This skill has passed most security checks with only minor considerations noted.
SkillShield's automated analysis identified 2 findings: 0 critical, 1 high, 1 medium, and 0 low severity. Key findings include Missing required field: name, Potential Command Injection via User Input to System Tools.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings2
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| HIGH | Potential Command Injection via User Input to System Tools The skill's documentation explicitly states it 'Uses standard system tools' and lists `bash` commands (`ps`, `top`, `free`, `uptime`) as its operational mechanism. The 'Usage' examples, such as 'Find all node processes', strongly imply that user-provided input will be incorporated into these shell commands. Without proper and robust sanitization of user input before its inclusion in command strings, an attacker could inject arbitrary shell commands, potentially leading to remote code execution, data exfiltration, or system compromise. Implement strict input validation and sanitization for all user-provided strings that are used in the construction of shell commands. Avoid direct string concatenation for command building. Consider using a library or framework designed for safe command execution, or strictly whitelist allowed inputs and command structures to prevent arbitrary command injection. | LLM | SKILL.md:22 | |
| MEDIUM | Missing required field: name The 'name' field is required for claude_code skills but is missing from frontmatter. Add a 'name' field to the SKILL.md frontmatter. | Static | skills/sa9saq/proc-monitor/SKILL.md:1 |
Scan History
Embed Code
[](https://skillshield.io/report/a87518c56616d557)
Powered by SkillShield