Security Audit

sundial-org/awesome-openclaw-skills:skills/adaptive-suite

github.com/sundial-org/awesome-openclaw-skills

AI SkillCommit 6d998e005da6

CAUTION

Scanned 27 days ago

Critical

Immediate action required

High

Priority fixes suggested

Medium

Best practices review

Low

Acknowledged / Tracked

Trust Assessment

sundial-org/awesome-openclaw-skills:skills/adaptive-suite received a trust score of 55/100, placing it in the Caution category. This skill has some security considerations that users should review before deployment.

SkillShield's automated analysis identified 1 finding: 0 critical, 1 high, 0 medium, and 0 low severity. Key findings include Potential Data Collection from NAS Directories.

The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.

Last analyzed on March 3, 2026 (commit 6d998e00). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.

Layer Breakdown

Manifest Analysis

100%

Static Code Analysis

85%

Dependency Graph

100%

LLM Behavioral Safety

100%

Behavioral Risk Signals

Network Access

1 finding

Filesystem Write

1 finding

Excessive Permissions

1 finding

Security Findings1

Severity	Finding	Layer	Location
HIGH	Potential Data Collection from NAS Directories The skill explicitly states its intent to 'Collect file names, metadata, and structure' from 'NAS directories' via a 'localized desktop app'. While marked 'read-only', the collection of this metadata can still expose sensitive information about the user's data organization, file types, and potentially personal or proprietary project structures. This poses a privacy and potential data exfiltration risk if this collected data is not handled securely or is transmitted externally. The scope of 'NAS directories' is also broadly defined, implying wide access to local or network storage. Clarify the exact scope of NAS access required. Implement strict controls to ensure collected metadata remains local and is never transmitted without explicit user consent. Consider anonymizing or hashing sensitive file names/paths if collection is strictly necessary. Provide clear user prompts and granular permissions for any data collection, explaining what data is collected and how it is used.	Static	SKILL.md:23

Scan History

Embed Code

[![SkillShield](https://skillshield.io/api/v1/badge/37268bfa7a817947.svg)](https://skillshield.io/report/37268bfa7a817947)