Trust Assessment
elixir-pro received a trust score of 85/100, placing it in the Mostly Trusted category. This skill has passed most security checks with only minor considerations noted.
SkillShield's automated analysis identified 1 finding: 0 critical, 0 high, 1 medium, and 0 low severity. Key findings include Potential Data Exfiltration via Explicit File Access Instruction.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 20, 2026 (commit e36d6fd3). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings1
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| MEDIUM | Potential Data Exfiltration via Explicit File Access Instruction The skill's instructions explicitly tell the LLM to 'open `resources/implementation-playbook.md`'. This indicates that the LLM is expected to have file system access capabilities. If the `implementation-playbook.md` file contains sensitive or proprietary information, its content could be exposed to the user or the broader LLM context. Furthermore, if the LLM's file access capability is not strictly sandboxed, a malicious user could potentially leverage this instruction to prompt the LLM to open and exfiltrate arbitrary files. 1. Review the content of `resources/implementation-playbook.md` to ensure it does not contain any sensitive, confidential, or proprietary information that should not be exposed. 2. If the file is intended to be private or for internal LLM use only, consider removing the explicit instruction to 'open' it, or clarify that it's not for user display. 3. Implement strict sandboxing for the LLM's file access capabilities, limiting it to only explicitly allowed files and paths, and preventing arbitrary file access. | LLM | SKILL.md:16 |
Scan History
Embed Code
[](https://skillshield.io/report/99f88d9b2670995e)
Powered by SkillShield