Trust Assessment
security received a trust score of 85/100, placing it in the Mostly Trusted category. This skill has passed most security checks with only minor considerations noted.
SkillShield's automated analysis identified 2 findings: 0 critical, 1 high, 0 medium, and 1 low severity. Key findings include Node lockfile missing, Recommended integration pattern uses 'eval' for command execution.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings2
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| HIGH | Recommended integration pattern uses 'eval' for command execution The skill's recommended integration pattern for AI agents involves using `eval "$command"` after validating the command with `security.sh validate-command`. While the skill aims to sanitize commands, `eval` is an inherently dangerous function that can lead to command injection if the validation is bypassed or incomplete. Recommending `eval` as a primary execution method, even with pre-validation, introduces a significant risk. A robust validation layer is crucial, but `eval` should generally be avoided for user-controlled input due to its potential for unexpected behavior and bypasses. Avoid `eval` for executing user-controlled commands. Consider using safer alternatives like `subprocess.run()` with `shell=False` in Python, or carefully constructed `bash` arrays with `exec` or `"$@"` for specific, known commands, rather than arbitrary string evaluation. If `eval` is absolutely necessary, ensure the validation logic is extremely robust and formally verified, and consider sandboxing the execution environment. | LLM | SKILL.md:36 | |
| LOW | Node lockfile missing package.json is present but no lockfile was found (package-lock.json, pnpm-lock.yaml, or yarn.lock). Commit a lockfile for deterministic dependency resolution. | Dependencies | skills/gtrusler/clawdbot-security-suite/package.json |
Scan History
Embed Code
[](https://skillshield.io/report/56599952e5726728)
Powered by SkillShield