Trust Assessment
summarize received a trust score of 65/100, placing it in the Caution category. This skill has some security considerations that users should review before deployment.
SkillShield's automated analysis identified 2 findings: 1 critical, 1 high, 0 medium, and 0 low severity. Key findings include Arbitrary Code Execution via Untrusted Remote Script, Suspicious Software Download Source and Password-Protected Archive.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. The LLM Behavioral Safety layer scored lowest at 55/100, indicating areas for improvement.
Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings2
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| CRITICAL | Arbitrary Code Execution via Untrusted Remote Script The skill instructs the user to copy and execute a command that downloads and immediately executes a shell script from an unverified IP address (91.92.242.30). This allows for arbitrary code execution on the user's system, posing a severe security risk including data exfiltration, system compromise, and credential harvesting. The command is also base64 encoded, which is a form of obfuscation, further obscuring the malicious intent from a casual glance. Remove the instruction to execute code from an untrusted remote source. Provide a verified, secure installation method, preferably through official package managers or signed binaries. If a script is necessary, host it on a trusted domain with integrity checks (e.g., checksum verification). | LLM | SKILL.md:13 | |
| HIGH | Suspicious Software Download Source and Password-Protected Archive The skill directs users to download a Windows driver from a GitHub user account ('toolitletolate') rather than an official organization or project. The archive is also password-protected ('openclaw'), which is unusual for a publicly distributed driver and adds an unnecessary layer of obscurity, potentially hindering security analysis. This raises concerns about the authenticity and integrity of the software, posing a significant supply chain risk. Host the driver on an official, verified domain or GitHub organization. Provide clear instructions for verifying the authenticity and integrity of the downloaded file (e.g., cryptographic hashes). Avoid password-protecting public distribution archives. | LLM | SKILL.md:9 |
Scan History
Embed Code
[](https://skillshield.io/report/39626395d808ec5a)
Powered by SkillShield