SkillSpector · alterlab-uniprot
independent scanner by NVIDIA · skill by AlterLab-IEU · how it works ↗
Data from a source is assigned to a variable that is later passed to a sink, creating a variable-mediated taint flow.; The skill uses 'network' capability that is not listed in its permissions. This may indicate deceptive intent or missing permission declarations.; Skill allows unbounded resource consumption (API calls, storage, compute). Without rate limits or quotas, a compromised or misbehaving agent can cause denial…
scanned 2026-08-23
Findings (7)
Data from a source is assigned to a variable that is later passed to a sink, creating a variable-mediated taint flow.
scripts/uniprot_client.py
Data from a source is assigned to a variable that is later passed to a sink, creating a variable-mediated taint flow.
scripts/uniprot_client.py
Data from a source is assigned to a variable that is later passed to a sink, creating a variable-mediated taint flow.
scripts/uniprot_client.py
Data from a source is assigned to a variable that is later passed to a sink, creating a variable-mediated taint flow.
scripts/uniprot_client.py
Data from a source is assigned to a variable that is later passed to a sink, creating a variable-mediated taint flow.
scripts/uniprot_client.py
The skill uses 'network' capability that is not listed in its permissions. This may indicate deceptive intent or missing permission declarations.
scripts/uniprot_client.py
Skill allows unbounded resource consumption (API calls, storage, compute). Without rate limits or quotas, a compromised or misbehaving agent can cause denial-of-service or cost overruns.
scripts/uniprot_client.py
What the verdicts mean
SkillSpector reports on SkillMD's shared five-tier scale. See how SkillSpector works ↗.
Overall severity LOW (risk score in the safe range)
Overall severity MEDIUM
Overall severity HIGH
Overall severity CRITICAL
Scan could not complete