SkillSpector · ai-studio-image

Without declared permissions the skill's intent is opaque and cannot be validated.

SKILL.md

Code accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft.

scripts/config.py

Code accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft.

scripts/config.py

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

scripts/prompt_engine.py

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

scripts/prompt_engine.py

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

scripts/prompt_engine.py

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

references/setup-guide.md

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

references/setup-guide.md

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

scripts/config.py

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

scripts/config.py

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

scripts/config.py

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

scripts/config.py

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

scripts/config.py

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

scripts/config.py

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

scripts/config.py

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

scripts/generate.py

Dependencies lack version pinning, allowing potential malicious package updates. Consider pinning versions.

scripts/requirements.txt

Dependencies lack version pinning, allowing potential malicious package updates. Consider pinning versions.

scripts/requirements.txt

Dependencies lack version pinning, allowing potential malicious package updates. Consider pinning versions.

scripts/requirements.txt

Dependency has known vulnerabilities (CVEs). Using packages with unpatched security flaws exposes the environment to known exploits.

scripts/requirements.txt