← back to slfg

SkillSpector · slfg

independent scanner by NVIDIA · skill by brycewang-stanford · how it works ↗

PASSmax severity: LOWrisk score: 6

Skill reads from agent configuration directories (.claude/, .codex/, .gemini/). These directories may contain API keys, personal settings, and other credenti…

scanned 2026-08-23

Findings (2)

HIGHAgent Snoopingconfidence: 0.255

Skill reads from agent configuration directories (.claude/, .codex/, .gemini/). These directories may contain API keys, personal settings, and other credentials that the skill has no legitimate need to access.

references/orchestration-patterns.md

HIGHAgent Snoopingconfidence: 0.255

Skill reads from agent configuration directories (.claude/, .codex/, .gemini/). These directories may contain API keys, personal settings, and other credentials that the skill has no legitimate need to access.

references/orchestration-patterns.md

What the verdicts mean

SkillSpector reports on SkillMD's shared five-tier scale. See how SkillSpector works ↗.

PASSthis skill

Overall severity LOW (risk score in the safe range)

CAUTION

Overall severity MEDIUM

WARNING

Overall severity HIGH

FAIL

Overall severity CRITICAL

INCONCLUSIVE

Scan could not complete