Skill Scanner · baoyu-post-to-x
independent scanner by Cisco AI Defense · skill by ECNU-ICALK · how it works ↗
Skill does not specify a license; Node.js child_process module usage for shell command execution; Node.js filesystem access that could read or write sensitive data; +1 more
scanned 2026-08-22
Findings (20)
Skill does not specify a license
SKILL.md
Node.js child_process module usage for shell command execution
scripts\check-paste-permissions.ts:69
Node.js child_process module usage for shell command execution
scripts\check-paste-permissions.ts:117
Node.js child_process module usage for shell command execution
scripts\check-paste-permissions.ts:138
Node.js child_process module usage for shell command execution
scripts\check-paste-permissions.ts:151
Node.js child_process module usage for shell command execution
scripts\check-paste-permissions.ts:166
Node.js child_process module usage for shell command execution
scripts\check-paste-permissions.ts:167
Node.js child_process module usage for shell command execution
scripts\check-paste-permissions.ts:181
Node.js child_process module usage for shell command execution
scripts\check-paste-permissions.ts:192
Node.js filesystem access that could read or write sensitive data
scripts\copy-to-clipboard.ts:115
Node.js filesystem access that could read or write sensitive data
scripts\md-to-html.ts:282
Node.js child_process module usage for shell command execution
scripts\paste-from-clipboard.ts:54
Node.js child_process module usage for shell command execution
scripts\paste-from-clipboard.ts:77
Node.js child_process module usage for shell command execution
scripts\paste-from-clipboard.ts:103
Node.js child_process module usage for shell command execution
scripts\paste-from-clipboard.ts:107
Node.js child_process module usage for shell command execution
scripts\paste-from-clipboard.ts:130
Node.js filesystem access that could read or write sensitive data
scripts\x-article.ts:69
Node.js filesystem access that could read or write sensitive data
scripts\x-article.ts:345
Outbound network request primitives in JavaScript/TypeScript
scripts\x-utils.ts:102
Node.js child_process module usage for shell command execution
scripts\x-utils.ts:224
What the verdicts mean
Skill Scanner reports on SkillMD's shared five-tier scale. See how Skill Scanner works ↗.
Reported as safe — no findings
Findings up to MEDIUM severity
Findings of HIGH severity
Findings of CRITICAL severity
Scan could not complete