← back to skill-drift-guard

Skill Scanner · skill-drift-guard

independent scanner by Cisco AI Defense · skill by luokai0 · how it works ↗

WARNINGmax severity: HIGH

Hidden data file detected; Skill does not specify a license; Dangerous data flow in command pipeline; +1 more

scanned 2026-08-22

Findings (17)

LOWobfuscation

Hidden data file detected

.clawhub\origin.json

INFOpolicy_violation

Skill does not specify a license

SKILL.md

HIGHcommand_injection

Dangerous data flow in command pipeline

SKILL.md:1

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

scripts\cli.js:259

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

scripts\cli.js:269

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

scripts\cli.js:284

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

scripts\cli.js:291

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

scripts\cli.js:782

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

scripts\reporters.js:690

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

scripts\reporters.js:691

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

scripts\reporters.js:698

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

scripts\scanner.js:223

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

scripts\scanner.js:379

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

scripts\scanner.js:732

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

scripts\scanner.js:755

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

scripts\scanner.js:768

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

scripts\scanner.js:1187

What the verdicts mean

Skill Scanner reports on SkillMD's shared five-tier scale. See how Skill Scanner works ↗.

PASS

Reported as safe — no findings

CAUTION

Findings up to MEDIUM severity

WARNINGthis skill

Findings of HIGH severity

FAIL

Findings of CRITICAL severity

INCONCLUSIVE

Scan could not complete