Trust Assessment
seats-aero received a trust score of 65/100, placing it in the Caution category. This skill has some security considerations that users should review before deployment.
SkillShield's automated analysis identified 2 findings: 1 critical, 0 high, 1 medium, and 0 low severity. Key findings include Missing required field: name, Untrusted content dictates LLM behavior and credential handling.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings2
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| CRITICAL | Untrusted content dictates LLM behavior and credential handling The `SKILL.md` file, which is explicitly marked as untrusted input, contains direct instructions for the host LLM on how to operate the skill. This includes directives such as prompting the user for an API key, storing it in conversation context, and using it in API requests. Allowing untrusted content to dictate the LLM's operational logic, especially regarding sensitive data like API keys, constitutes a prompt injection vulnerability. The LLM should not follow instructions originating from untrusted sources. Move all instructions intended for the host LLM (e.g., how to prompt for API keys, how to store context, how to call tools) out of the untrusted `SKILL.md` content and into a trusted configuration or prompt template. The `SKILL.md` should primarily serve as user-facing documentation or a description of the skill's capabilities, not as a source of operational instructions for the LLM. | LLM | SKILL.md:8 | |
| MEDIUM | Missing required field: name The 'name' field is required for claude_code skills but is missing from frontmatter. Add a 'name' field to the SKILL.md frontmatter. | Static | skills/jarrodjs/seats-aero/SKILL.md:1 |
Scan History
Embed Code
[](https://skillshield.io/report/8674a1ebfb6e9129)
Powered by SkillShield