Skill Scanner · minimax-pdf
independent scanner by Cisco AI Defense · skill by infometa · how it works ↗
FAILmax severity: CRITICAL
Node.js child_process module usage for shell command execution
scanned 2026-08-22
Findings (4)
CRITICALcommand_injection
Node.js child_process module usage for shell command execution
scripts\render_cover.js:38
CRITICALcommand_injection
Node.js child_process module usage for shell command execution
scripts\render_cover.js:41
CRITICALcommand_injection
Node.js child_process module usage for shell command execution
scripts\render_cover.js:61
CRITICALcommand_injection
Node.js child_process module usage for shell command execution
scripts\render_cover.js:62
What the verdicts mean
Skill Scanner reports on SkillMD's shared five-tier scale. See how Skill Scanner works ↗.
PASS
Reported as safe — no findings
CAUTION
Findings up to MEDIUM severity
WARNING
Findings of HIGH severity
FAILthis skill
Findings of CRITICAL severity
INCONCLUSIVE
Scan could not complete