Trust Assessment
zscore received a trust score of 83/100, placing it in the Mostly Trusted category. This skill has passed most security checks with only minor considerations noted.
SkillShield's automated analysis identified 2 findings: 0 critical, 1 high, 0 medium, and 1 low severity. Key findings include Node lockfile missing, Arbitrary File Read via Untrusted Path.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings2
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| HIGH | Arbitrary File Read via Untrusted Path The skill's `cmdRegister` function in `scripts/zeru.ts` uses `fs.readFileSync` with a file path (`flags.json`) directly derived from untrusted user input (the `--json` command-line argument). An attacker could provide a path to an arbitrary file on the system (e.g., `/etc/passwd`, `~/.ssh/id_rsa`, `../../.env`), leading to the skill attempting to read its content. While the script attempts to parse the content as JSON and may exit on failure, the ability to read arbitrary files constitutes an excessive permission and a data exfiltration risk, as the content could potentially be leaked through error messages or subsequent processing if not handled carefully. Implement strict validation and sanitization for file paths provided via user input. Restrict file access to a designated, isolated directory, or validate that the path does not contain directory traversal sequences (e.g., `..`) and is not an absolute path. Consider passing JSON content directly as an argument if file-based input is not strictly necessary, or use a file picker interface. | LLM | scripts/zeru.ts:94 | |
| LOW | Node lockfile missing package.json is present but no lockfile was found (package-lock.json, pnpm-lock.yaml, or yarn.lock). Commit a lockfile for deterministic dependency resolution. | Dependencies | skills/elitex45/zscore/package.json |
Scan History
Embed Code
[](https://skillshield.io/report/818bd267876763d9)
Powered by SkillShield