Trust Assessment
tracks received a trust score of 65/100, placing it in the Caution category. This skill has some security considerations that users should review before deployment.
SkillShield's automated analysis identified 2 findings: 1 critical, 0 high, 1 medium, and 0 low severity. Key findings include Missing required field: name, Untrusted content attempts to issue direct commands to the LLM.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings2
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| CRITICAL | Untrusted content attempts to issue direct commands to the LLM The untrusted `SKILL.md` contains explicit instructions intended for the LLM, such as 'Fetch the URL and confirm it returns a valid response' and 'Confirm the file exists and contains expected content'. These are attempts to manipulate the host LLM into performing actions (network requests, filesystem access) based on untrusted input, overriding the analyzer's primary instructions. The instruction 'Block submission until all items pass verification.' is also a direct command attempting to control the LLM's workflow. Remove all direct instructions intended for the LLM from untrusted content. The LLM should not be instructed to perform actions like fetching URLs or checking files based on untrusted input. These verification steps should be handled by a trusted, sandboxed environment or explicitly defined tools, not by direct LLM interpretation of untrusted text. | LLM | SKILL.md:60 | |
| MEDIUM | Missing required field: name The 'name' field is required for claude_code skills but is missing from frontmatter. Add a 'name' field to the SKILL.md frontmatter. | Static | skills/swairshah/crypto-hackathon/tracks/SKILL.md:1 |
Scan History
Embed Code
[](https://skillshield.io/report/af100c563610a1ef)
Powered by SkillShield