← back to cnb-pipeline

Skill Scanner · cnb-pipeline

independent scanner by Cisco AI Defense · skill by eryajf · how it works ↗

WARNINGmax severity: HIGH

Skill does not specify a license; File extension does not match actual content type; Hidden data file detected; +2 more

scanned 2026-08-22

Findings (7)

INFOpolicy_violation

Skill does not specify a license

SKILL.md

MEDIUMobfuscation

File extension does not match actual content type

references\best-practices.md

LOWobfuscation

Hidden data file detected

validator\.web-trigger-schema-cache.json

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

validator\validate.js:75

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

validator\validate.js:550

MEDIUMdata_exfiltration

Outbound network request primitives in JavaScript/TypeScript

validator\validate.js:562

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

validator\validate.js:583

What the verdicts mean

Skill Scanner reports on SkillMD's shared five-tier scale. See how Skill Scanner works ↗.

PASS

Reported as safe — no findings

CAUTION

Findings up to MEDIUM severity

WARNINGthis skill

Findings of HIGH severity

FAIL

Findings of CRITICAL severity

INCONCLUSIVE

Scan could not complete