Trust Assessment
toon received a trust score of 82/100, placing it in the Mostly Trusted category. This skill has passed most security checks with only minor considerations noted.
SkillShield's automated analysis identified 2 findings: 0 critical, 1 high, 1 medium, and 0 low severity. Key findings include Execution of unverified local script, Unpinned npm dependency.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings2
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| HIGH | Execution of unverified local script The skill's installation instructions advise copying and executing a local script (`scripts/toon`) from the skill package. The content of this script is not provided for analysis within the given context. Executing unverified scripts from untrusted sources poses a significant command injection risk, as it allows arbitrary code execution on the host system if the script contains malicious commands. Provide the `scripts/toon` file for security analysis, or replace the local script with a direct call to a well-known, pinned package (e.g., `npx @toon-format/cli@1.0.0`). If a local script is necessary, its contents must be thoroughly vetted and its functionality limited to essential operations. | LLM | SKILL.md:22 | |
| MEDIUM | Unpinned npm dependency The skill references the `@toon-format/cli` npm package without specifying a version. If the agent or the `toon` script installs and uses this package, an unpinned dependency can lead to fetching a vulnerable or malicious version if the package maintainer's account is compromised or a new malicious version is published. This introduces a supply chain risk. Specify a pinned version for the `@toon-format/cli` package (e.g., `@toon-format/cli@1.0.0`) to ensure deterministic and secure dependency resolution, mitigating risks from unexpected updates or malicious package versions. | LLM | SKILL.md:40 |
Scan History
Embed Code
[](https://skillshield.io/report/341c7a22922753a7)
Powered by SkillShield