Security Audit

zarazhangrui/frontend-slides:root

github.com/zarazhangrui/frontend-slides

AI SkillCommit 89a909bb0999

CRITICAL

Scanned about 1 month ago

Critical

Immediate action required

High

Priority fixes suggested

Medium

Best practices review

Low

Acknowledged / Tracked

Trust Assessment

zarazhangrui/frontend-slides:root received a trust score of 10/100, placing it in the Untrusted category. This skill has significant security findings that require attention before use in production.

SkillShield's automated analysis identified 6 findings: 0 critical, 6 high, 0 medium, and 0 low severity. Key findings include Covert behavior / concealment directives.

The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. The Manifest Analysis layer scored lowest at 10/100, indicating areas for improvement.

Last analyzed on February 21, 2026 (commit 89a909bb). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.

Layer Breakdown

Manifest Analysis

10%

Static Code Analysis

100%

Dependency Graph

100%

LLM Behavioral Safety

100%

Security Findings6

Severity	Finding	Layer	Location
HIGH	Covert behavior / concealment directives CSS-based text hiding Remove hidden instructions, zero-width characters, and bidirectional overrides. Skill instructions should be fully visible and transparent to users.	Manifest	SKILL.md:161
HIGH	Covert behavior / concealment directives CSS-based text hiding Remove hidden instructions, zero-width characters, and bidirectional overrides. Skill instructions should be fully visible and transparent to users.	Manifest	SKILL.md:602
HIGH	Covert behavior / concealment directives CSS-based text hiding Remove hidden instructions, zero-width characters, and bidirectional overrides. Skill instructions should be fully visible and transparent to users.	Manifest	SKILL.md:942
HIGH	Covert behavior / concealment directives CSS-based text hiding Remove hidden instructions, zero-width characters, and bidirectional overrides. Skill instructions should be fully visible and transparent to users.	Manifest	SKILL.md:955
HIGH	Covert behavior / concealment directives CSS-based text hiding Remove hidden instructions, zero-width characters, and bidirectional overrides. Skill instructions should be fully visible and transparent to users.	Manifest	SKILL.md:962
HIGH	Covert behavior / concealment directives CSS-based text hiding Remove hidden instructions, zero-width characters, and bidirectional overrides. Skill instructions should be fully visible and transparent to users.	Manifest	SKILL.md:969

Scan History

Embed Code

[![SkillShield](https://skillshield.io/api/v1/badge/b84c4de59a938fc7.svg)](https://skillshield.io/report/b84c4de59a938fc7)