Trust Assessment
siliconflow-vision received a trust score of 44/100, placing it in the Untrusted category. This skill has significant security findings that require attention before use in production.
SkillShield's automated analysis identified 5 findings: 1 critical, 0 high, 4 medium, and 0 low severity. Key findings include Suspicious import: urllib.request, Suspicious import: requests, Unpinned Python dependency version.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings5
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| CRITICAL | Arbitrary File Read and Data Exfiltration via Unsanitized Image Path The `scripts/analyze_image.py` and `scripts/recognize.py` scripts accept an `image` argument that is directly used as a file path for reading. An attacker (or a compromised host LLM) could provide a path to sensitive files (e.g., `/etc/passwd`, `~/.ssh/id_rsa`, `config/default.json`) on the system. The content of these files would then be base64 encoded and sent to the configured third-party vision API (SiliconFlow, OpenAI, Anthropic) as part of the image analysis request, leading to data exfiltration. Implement strict path validation and sanitization for the `image` argument. Restrict file access to a designated, sandboxed directory (e.g., a temporary upload folder). Ensure that the resolved path is always within this allowed directory using functions like `os.path.abspath` and `os.path.commonprefix` or `pathlib.Path.resolve()` combined with checks against a base directory. Alternatively, if the skill is only meant to process user-uploaded images, the host LLM should provide a URL to a secure storage service rather than a local file path. | LLM | scripts/analyze_image.py:100 | |
| MEDIUM | Suspicious import: urllib.request Import of 'urllib.request' detected. This module provides network or low-level system access. Verify this import is necessary. Network and system modules in skill code may indicate data exfiltration. | Static | skills/lycohana/siliconflow-vision/scripts/analyze_image.py:33 | |
| MEDIUM | Suspicious import: requests Import of 'requests' detected. This module provides network or low-level system access. Verify this import is necessary. Network and system modules in skill code may indicate data exfiltration. | Static | skills/lycohana/siliconflow-vision/scripts/analyze_image.py:26 | |
| MEDIUM | Suspicious import: requests Import of 'requests' detected. This module provides network or low-level system access. Verify this import is necessary. Network and system modules in skill code may indicate data exfiltration. | Static | skills/lycohana/siliconflow-vision/scripts/recognize.py:14 | |
| MEDIUM | Unpinned Python dependency version Requirement 'requests>=2.28.0' is not pinned to an exact version. Pin Python dependencies with '==<exact version>'. | Dependencies | skills/lycohana/siliconflow-vision/scripts/requirements.txt:1 |
Scan History
Embed Code
[](https://skillshield.io/report/607fd3543188609b)
Powered by SkillShield