Trust Assessment
web-search received a trust score of 58/100, placing it in the Caution category. This skill has some security considerations that users should review before deployment.
SkillShield's automated analysis identified 3 findings: 1 critical, 1 high, 1 medium, and 0 low severity. Key findings include Unpinned npm dependency version, Command Injection via unsanitized `query` parameter, Suspicious dependency name `package-lock.json`.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. The LLM Behavioral Safety layer scored lowest at 55/100, indicating areas for improvement.
Last analyzed on February 14, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings3
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| CRITICAL | Command Injection via unsanitized `query` parameter The `query` parameter is directly interpolated into a `curl` command executed via the shell. This allows an attacker to inject arbitrary shell commands by crafting a malicious `query` string (e.g., `'; <malicious_command>'`) which will be executed on the host system. Implement robust input sanitization and validation for the `query` parameter. Ideally, use a dedicated HTTP client library that handles URL encoding and avoids shell execution for external requests. If shell execution is unavoidable, ensure all user-supplied inputs are properly escaped for the shell context. | LLM | SKILL.md:5 | |
| HIGH | Suspicious dependency name `package-lock.json` The skill's `package.json`, `package-lock.json`, and `pnpm-lock.yaml` files list a dependency named `package-lock.json`. This name is highly suspicious as it mimics a common project configuration file, suggesting a potential typosquatting attack or an attempt to include a malicious package by deception. Such packages often contain malicious code. Remove the `package-lock.json` dependency. Verify the purpose and origin of all dependencies. If a package is truly needed, ensure its name is legitimate and not a common file name. Review the actual code of the dependency if it's deemed necessary. | LLM | package.json:3 | |
| MEDIUM | Unpinned npm dependency version Dependency 'package-lock.json' is not pinned to an exact version ('^1.0.0'). Pin dependencies to exact versions to reduce drift and supply-chain risk. | Dependencies | skills/lucky-2968/search-1-0-0/package.json |
Scan History
Embed Code
[](https://skillshield.io/report/eb752ab0833fe2f1)
Powered by SkillShield