Trust Assessment
rate-limiter received a trust score of 65/100, placing it in the Caution category. This skill has some security considerations that users should review before deployment.
SkillShield's automated analysis identified 3 findings: 1 critical, 0 high, 1 medium, and 0 low severity. Key findings include Unpinned npm dependency version, User input directly passed to LLM prompt, Unused 'glob' dependency found.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings3
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| CRITICAL | User input directly passed to LLM prompt The skill takes user-provided input (`requirement`) directly from the command line and inserts it into the `user` message of an OpenAI API call without any sanitization or validation. This allows an attacker to craft malicious input to manipulate the underlying LLM (e.g., override system instructions, extract sensitive information, or generate harmful content), leading to prompt injection. The `system` prompt is vulnerable to being overridden by a malicious `user` prompt. Implement robust input validation and sanitization for the `requirement` argument. Consider using a separate LLM call for input moderation or a more sophisticated prompt engineering technique (e.g., few-shot examples, XML/JSON structured input) to constrain the LLM's behavior and make it more resistant to adversarial prompts. Explicitly instruct the system prompt to ignore conflicting instructions from the user. | LLM | src/index.ts:10 | |
| MEDIUM | Unpinned npm dependency version Dependency 'commander' is not pinned to an exact version ('^12.1.0'). Pin dependencies to exact versions to reduce drift and supply-chain risk. | Dependencies | skills/lxgicstudios/rate-limiter/package.json | |
| INFO | Unused 'glob' dependency found The `glob` package is listed as a dependency in `package.json` and `package-lock.json`, but it is not imported or used in the provided source files (`src/cli.ts`, `src/index.ts`). Unused dependencies increase the attack surface, introduce unnecessary supply chain risks, and can lead to larger bundle sizes. Remove the `glob` dependency from `package.json` if it is not used anywhere in the project. | LLM | package.json:8 |
Scan History
Embed Code
[](https://skillshield.io/report/7fed3db47bd4d430)
Powered by SkillShield