Trust Assessment
triple-memory received a trust score of 81/100, placing it in the Mostly Trusted category. This skill has passed most security checks with only minor considerations noted.
SkillShield's automated analysis identified 3 findings: 0 critical, 1 high, 1 medium, and 0 low severity. Key findings include Sensitive environment variable access: $OPENAI_API_KEY, User-controlled input passed directly to LLM-powered search function, Dependency on external skill introduces supply chain risk.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings3
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| HIGH | User-controlled input passed directly to LLM-powered search function The `QUERY` variable, which is directly derived from user input (`$1`), is passed as an argument to `clawdbot memory search`. Given that `clawdbot` is likely an LLM-powered agent framework, this creates a prompt injection vulnerability. A malicious user could craft the `$QUERY` to manipulate the LLM's behavior, extract sensitive information from its context, or bypass intended restrictions within the `clawdbot` memory search functionality. Implement robust input sanitization and validation for the `$QUERY` before passing it to `clawdbot memory search`. If `clawdbot` exposes a specific API for LLM interaction, use that API with appropriate safety measures (e.g., system prompts, content filtering). Consider if the search functionality can be limited to specific data sources or types to reduce the impact of potential injection. | LLM | scripts/file-search.sh:15 | |
| MEDIUM | Sensitive environment variable access: $OPENAI_API_KEY Access to sensitive environment variable '$OPENAI_API_KEY' detected in shell context. Verify this environment variable access is necessary and the value is not exfiltrated. | Static | skills/ktpriyatham/triple-memory/SKILL.md:51 | |
| INFO | Dependency on external skill introduces supply chain risk The skill depends on `git-notes-memory`, which is installed via `clawdhub install`. While `clawdhub` likely manages trusted skills, any external dependency introduces a supply chain risk. If `git-notes-memory` were compromised or contained vulnerabilities, this skill would inherit them. The specific version of `git-notes-memory` is not pinned, which could lead to unexpected behavior or vulnerabilities if the dependency updates. Ensure `git-notes-memory` is regularly audited and sourced from a trusted, immutable registry. If `clawdhub` supports it, pin the dependency to a specific version to prevent unexpected updates and ensure reproducibility and security. | LLM | SKILL.md:59 |
Scan History
Embed Code
[](https://skillshield.io/report/a948fed75fdd0fe9)
Powered by SkillShield