Skill Scanner · find

independent scanner by Cisco AI Defense · skill by majiayu000 · how it works ↗

FAILmax severity: CRITICAL

Skill does not specify a license; Discovery and execution chain (find -exec); find command with -exec flag can execute arbitrary commands on discovered files

scanned 2026-08-22

Findings (13)

INFOpolicy_violation

Skill does not specify a license

SKILL.md

CRITICALcommand_injection

Discovery and execution chain (find -exec)

SKILL.md:31

CRITICALcommand_injection

Discovery and execution chain (find -exec)

SKILL.md:36

CRITICALcommand_injection

Discovery and execution chain (find -exec)

SKILL.md:44

CRITICALcommand_injection

Discovery and execution chain (find -exec)

SKILL.md:49

HIGHcommand_injection

find command with -exec flag can execute arbitrary commands on discovered files

SKILL.md:99

HIGHcommand_injection

find command with -exec flag can execute arbitrary commands on discovered files

SKILL.md:130

HIGHcommand_injection

find command with -exec flag can execute arbitrary commands on discovered files

SKILL.md:133

HIGHcommand_injection

find command with -exec flag can execute arbitrary commands on discovered files

SKILL.md:136

HIGHcommand_injection

find command with -exec flag can execute arbitrary commands on discovered files

SKILL.md:139

CRITICALcommand_injection

Discovery and execution chain (find -exec)

SKILL.md:151

HIGHcommand_injection

find command with -exec flag can execute arbitrary commands on discovered files

SKILL.md:152

CRITICALcommand_injection

Discovery and execution chain (find -exec)

SKILL.md:156

What the verdicts mean

Skill Scanner reports on SkillMD's shared five-tier scale. See how Skill Scanner works ↗.

PASS

Reported as safe — no findings

CAUTION

Findings up to MEDIUM severity

WARNING

Findings of HIGH severity

FAILthis skill

Findings of CRITICAL severity

INCONCLUSIVE

Scan could not complete