Trust Assessment
linkerd-patterns received a trust score of 25/100, placing it in the Untrusted category. This skill has significant security findings that require attention before use in production.
SkillShield's automated analysis identified 3 findings: 2 critical, 1 high, 0 medium, and 0 low severity. Key findings include Arbitrary command execution, Remote code execution: curl/wget pipe to shell, Direct execution of remote script via curl | sh.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. The Static Code Analysis layer scored lowest at 55/100, indicating areas for improvement.
Last analyzed on June 1, 2026 (commit 0818067b). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings3
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| CRITICAL | Arbitrary command execution Remote code download piped to interpreter Review all shell execution calls. Ensure commands are static (not built from user input), use absolute paths, and are strictly necessary. Prefer library APIs over shell commands. | Manifest | plugins/cloud-infrastructure/skills/linkerd-patterns/SKILL.md:54 | |
| CRITICAL | Remote code execution: curl/wget pipe to shell Detected a pattern that downloads and immediately executes remote code. This is a primary malware delivery vector. Never pipe curl/wget output directly to a shell interpreter. | Static | plugins/cloud-infrastructure/skills/linkerd-patterns/SKILL.md:54 | |
| HIGH | Direct execution of remote script via curl | sh The skill provides a bash command that directly pipes the output of `curl` from a remote URL (`https://run.linkerd.io/install`) into `sh` for execution. This practice, often referred to as 'curl | sh', is a significant supply chain risk. If the remote server or the script hosted on it were compromised, arbitrary malicious code could be executed on the system running the command, leading to potential command injection, data exfiltration, or system compromise. While common for CLI installations, it bypasses traditional package manager security checks. Avoid direct piping of remote scripts to a shell. Recommend users to download the script, review its contents, and then execute it, or use a package manager if available. For Linkerd, suggest using `linkerd install --set cli.install=false` and then manually downloading the CLI binary from a trusted source (e.g., GitHub releases) and verifying its checksum. | Static | SKILL.md:39 |
Scan History
Embed Code
[](https://skillshield.io/report/f85525a6b2099a34)
Powered by SkillShield