Skill Scanner · ouyang

independent scanner by Cisco AI Defense · skill by kbarbel640-del · how it works ↗

FAILmax severity: CRITICAL

Skill does not specify a license; Node.js child_process module usage for shell command execution; Node.js filesystem access that could read or write sensitive data

scanned 2026-08-22

Findings (10)

INFOpolicy_violation

Skill does not specify a license

SKILL.md

CRITICALcommand_injection

Node.js child_process module usage for shell command execution

cli\jasper-recall.js:13

CRITICALcommand_injection

Node.js child_process module usage for shell command execution

cli\jasper-recall.js:34

CRITICALcommand_injection

Node.js child_process module usage for shell command execution

cli\jasper-recall.js:52

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

cli\jasper-recall.js:91

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

cli\jasper-recall.js:98

CRITICALcommand_injection

Node.js child_process module usage for shell command execution

src\index.js:9

CRITICALcommand_injection

Node.js child_process module usage for shell command execution

src\index.js:28

CRITICALcommand_injection

Node.js child_process module usage for shell command execution

src\index.js:41

CRITICALcommand_injection

Node.js child_process module usage for shell command execution

src\index.js:56

What the verdicts mean

Skill Scanner reports on SkillMD's shared five-tier scale. See how Skill Scanner works ↗.

PASS

Reported as safe — no findings

CAUTION

Findings up to MEDIUM severity

WARNING

Findings of HIGH severity

FAILthis skill

Findings of CRITICAL severity

INCONCLUSIVE

Scan could not complete