← back to kanban-lite

Skill Scanner · kanban-lite

independent scanner by Cisco AI Defense · skill by GeorgeQLe · how it works ↗

FAILmax severity: CRITICAL

Code executes bash but Bash tool not in allowed-tools; Skill does not specify a license; Node.js child_process module usage for shell command execution

scanned 2026-08-22

Findings (8)

HIGHunauthorized_tool_use

Code executes bash but Bash tool not in allowed-tools

C:\Users\mkyou\Documents\GitHub\Skillmd\apps\ingest\out\audit-local\skills\22855\SKILL.md

INFOpolicy_violation

Skill does not specify a license

SKILL.md

CRITICALcommand_injection

Node.js child_process module usage for shell command execution

scripts\kanban.mjs:325

CRITICALcommand_injection

Node.js child_process module usage for shell command execution

scripts\kanban.mjs:330

CRITICALcommand_injection

Node.js child_process module usage for shell command execution

scripts\kanban.mjs:337

CRITICALcommand_injection

Node.js child_process module usage for shell command execution

scripts\kanban.mjs:344

CRITICALcommand_injection

Node.js child_process module usage for shell command execution

scripts\kanban.mjs:345

CRITICALcommand_injection

Node.js child_process module usage for shell command execution

scripts\kanban.mjs:346

What the verdicts mean

Skill Scanner reports on SkillMD's shared five-tier scale. See how Skill Scanner works ↗.

PASS

Reported as safe — no findings

CAUTION

Findings up to MEDIUM severity

WARNING

Findings of HIGH severity

FAILthis skill

Findings of CRITICAL severity

INCONCLUSIVE

Scan could not complete