← back to issue-viz

Skill Scanner · issue-viz

independent scanner by Cisco AI Defense · skill by Mineru98 · how it works ↗

FAILmax severity: CRITICAL

Skill does not specify a license; Node.js child_process module usage for shell command execution

scanned 2026-08-22

Findings (11)

INFOpolicy_violation

Skill does not specify a license

SKILL.md

CRITICALcommand_injection

Node.js child_process module usage for shell command execution

scripts\issue-common.mjs:114

CRITICALcommand_injection

Node.js child_process module usage for shell command execution

scripts\issue-docs.mjs:57

CRITICALcommand_injection

Node.js child_process module usage for shell command execution

scripts\issue-docs.mjs:87

CRITICALcommand_injection

Node.js child_process module usage for shell command execution

scripts\issue-media.mjs:198

CRITICALcommand_injection

Node.js child_process module usage for shell command execution

scripts\issue-media.mjs:219

CRITICALcommand_injection

Node.js child_process module usage for shell command execution

scripts\issue-tracker.mjs:274

CRITICALcommand_injection

Node.js child_process module usage for shell command execution

scripts\issue-viz.mjs:142

CRITICALcommand_injection

Node.js child_process module usage for shell command execution

scripts\issue-viz.mjs:150

CRITICALcommand_injection

Node.js child_process module usage for shell command execution

scripts\issue-viz.mjs:152

CRITICALcommand_injection

Node.js child_process module usage for shell command execution

scripts\issue-viz.mjs:171

What the verdicts mean

Skill Scanner reports on SkillMD's shared five-tier scale. See how Skill Scanner works ↗.

PASS

Reported as safe — no findings

CAUTION

Findings up to MEDIUM severity

WARNING

Findings of HIGH severity

FAILthis skill

Findings of CRITICAL severity

INCONCLUSIVE

Scan could not complete