Trust Assessment
signalshield-analyst-teneo received a trust score of 84/100, placing it in the Mostly Trusted category. This skill has passed most security checks with only minor considerations noted.
SkillShield's automated analysis identified 2 findings: 0 critical, 1 high, 0 medium, and 1 low severity. Key findings include Downstream LLM Prompt Injection via 'ai' command, Unpinned npm dependencies in installation instructions.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings2
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| HIGH | Downstream LLM Prompt Injection via 'ai' command The skill exposes an 'ai' command that forwards arbitrary user-provided '[instruction]' to a 'GPT-5 module for natural language analysis'. This creates a direct vector for prompt injection against the downstream GPT-5 module, allowing users to manipulate its behavior, extract information, or generate harmful content by crafting malicious instructions. While the host LLM is not directly injected, the skill acts as a conduit for prompt injection against a connected AI system. Implement robust input sanitization and validation for the '[instruction]' argument before forwarding it to the downstream GPT-5 module. Consider using a fixed set of prompts, a guardrail LLM, or strict content filtering to prevent malicious instructions from reaching the target LLM. | LLM | SKILL.md:80 | |
| LOW | Unpinned npm dependencies in installation instructions The installation instructions recommend installing npm packages (`@teneo-protocol/sdk`, `dotenv`) without specifying exact versions. This can lead to supply chain risks if a future version of these packages introduces vulnerabilities or malicious code. A developer following these instructions would automatically pull the latest version, which might not be secure or compatible. Specify exact versions for npm dependencies in the installation instructions, e.g., `npm install @teneo-protocol/sdk@1.0.0 dotenv@16.0.0`, or recommend the use of a lock file (e.g., `package-lock.json`) to ensure reproducible and secure builds. | LLM | SKILL.md:128 |
Scan History
Embed Code
[](https://skillshield.io/report/3366acf6041baf48)
Powered by SkillShield