Trust Assessment
trein received a trust score of 80/100, placing it in the Mostly Trusted category. This skill has passed most security checks with only minor considerations noted.
SkillShield's automated analysis identified 2 findings: 0 critical, 1 high, 1 medium, and 0 low severity. Key findings include Potential Command Injection via User Input to CLI, Unpinned npm package version in manifest.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 12, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings2
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| HIGH | Potential Command Injection via User Input to CLI The skill is designed to execute the `trein` command-line interface based on user input. If user-provided arguments (e.g., station names, trip details) are directly interpolated into shell commands without proper sanitization or escaping, it could lead to command injection. An attacker could craft malicious input to execute arbitrary commands on the host system where the skill is run, potentially compromising the system. The LLM orchestrating this skill must ensure all user-provided arguments passed to the `trein` CLI are properly sanitized and shell-escaped before command execution. Utilize robust shell-escaping functions (e.g., `shlex.quote()` in Python) to prevent malicious input from being interpreted as commands or command arguments. | LLM | SKILL.md:30 | |
| MEDIUM | Unpinned npm package version in manifest The skill's manifest specifies the installation of the `trein` npm package without a pinned version. This means `npm i -g trein` will always install the latest available version. This introduces a supply chain risk: if a future version of `trein` introduces breaking changes, vulnerabilities, or malicious code, the skill's functionality or security could be compromised without explicit review or consent. Pin the npm package to a specific, known-good version (e.g., `"package": "trein@1.2.3"`) in the manifest to ensure deterministic and secure installations. Regularly review and update the pinned version as needed. | LLM | SKILL.md:1 |
Scan History
Embed Code
[](https://skillshield.io/report/101f4ab8e436f75c)
Powered by SkillShield