SkillSpector · 1password
independent scanner by NVIDIA · skill by jrennie99-glitch · how it works ↗
Code accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft.; Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
scanned 2026-08-23
Findings (3)
Code accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft.
references/cli-examples.md
Code accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft.
references/cli-examples.md
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
references/cli-examples.md
What the verdicts mean
SkillSpector reports on SkillMD's shared five-tier scale. See how SkillSpector works ↗.
Overall severity LOW (risk score in the safe range)
Overall severity MEDIUM
Overall severity HIGH
Overall severity CRITICAL
Scan could not complete