Security Audit

pymc-labs/agent-skills:skills/pymc-modeling

github.com/pymc-labs/agent-skills

AI SkillCommit 64e299daabcf

CRITICAL

Scanned 12 days ago

Critical

Immediate action required

High

Priority fixes suggested

Medium

Best practices review

Low

Acknowledged / Tracked

Trust Assessment

pymc-labs/agent-skills:skills/pymc-modeling received a trust score of 26/100, placing it in the Untrusted category. This skill has significant security findings that require attention before use in production.

SkillShield's automated analysis identified 4 findings: 2 critical, 0 high, 2 medium, and 0 low severity. Key findings include Persistence / self-modification instructions, Persistence mechanism: Shell RC file modification.

The analysis covered 4 layers: dependency_graph, llm_behavioral_safety, manifest_analysis, static_code_analysis. The manifest_analysis layer scored lowest at 40/100, indicating areas for improvement.

Last analyzed on February 8, 2026 (commit 64e299da). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.

Layer Breakdown

Manifest Analysis

40%

Static Code Analysis

86%

Dependency Graph

100%

LLM Behavioral Safety

100%

Behavioral Risk Signals

Filesystem Write

4 findings

Shell Execution

4 findings

Security Findings4

Severity	Finding	Layer	Location
CRITICAL	Persistence / self-modification instructions Shell RC file modification for persistence Remove any persistence mechanisms. Skills should not modify system startup configurations, crontabs, LaunchAgents, systemd services, or shell profiles.	Unknown	/tmp/skillscan-clone-n2hbrsg4/repo/skills/pymc-modeling/SKILL.md:257
CRITICAL	Persistence / self-modification instructions Shell RC file modification for persistence Remove any persistence mechanisms. Skills should not modify system startup configurations, crontabs, LaunchAgents, systemd services, or shell profiles.	Unknown	/tmp/skillscan-clone-n2hbrsg4/repo/skills/pymc-modeling/SKILL.md:262
MEDIUM	Persistence mechanism: Shell RC file modification Detected Shell RC file modification pattern. Persistence mechanisms allow malware to survive system restarts. Review this persistence pattern. Skills should not modify system startup configuration.	Unknown	/tmp/skillscan-clone-n2hbrsg4/repo/skills/pymc-modeling/SKILL.md:257
MEDIUM	Persistence mechanism: Shell RC file modification Detected Shell RC file modification pattern. Persistence mechanisms allow malware to survive system restarts. Review this persistence pattern. Skills should not modify system startup configuration.	Unknown	/tmp/skillscan-clone-n2hbrsg4/repo/skills/pymc-modeling/SKILL.md:262

Scan History

Embed Code

[![SkillShield](https://skillshield.io/api/v1/badge/bba8d75a75bb5d9a.svg)](https://skillshield.io/report/bba8d75a75bb5d9a)