← back to visual-companion

Skill Scanner · visual-companion

independent scanner by Cisco AI Defense · skill by Mineru98 · how it works ↗

WARNINGmax severity: HIGH

Skill does not specify a license; Outbound network request primitives in JavaScript/TypeScript; Node.js filesystem access that could read or write sensitive data

scanned 2026-08-22

Findings (20)

INFOpolicy_violation

Skill does not specify a license

SKILL.md

MEDIUMdata_exfiltration

Outbound network request primitives in JavaScript/TypeScript

scripts\helper.js:46

MEDIUMdata_exfiltration

Outbound network request primitives in JavaScript/TypeScript

scripts\helper.js:68

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

scripts\mark-pending-question.cjs:67

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

scripts\mark-pending-question.cjs:71

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

scripts\read-pending-event.cjs:42

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

scripts\read-pending-event.cjs:52

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

scripts\read-pending-event.cjs:81

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

scripts\read-pending-event.cjs:129

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

scripts\read-pending-event.cjs:134

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

scripts\server.cjs:102

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

scripts\server.cjs:103

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

scripts\server.cjs:138

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

scripts\server.cjs:194

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

scripts\server.cjs:336

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

scripts\server.cjs:372

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

scripts\server.cjs:373

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

scripts\server.cjs:378

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

scripts\server.cjs:452

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

scripts\server.cjs:493

What the verdicts mean

Skill Scanner reports on SkillMD's shared five-tier scale. See how Skill Scanner works ↗.

PASS

Reported as safe — no findings

CAUTION

Findings up to MEDIUM severity

WARNINGthis skill

Findings of HIGH severity

FAIL

Findings of CRITICAL severity

INCONCLUSIVE

Scan could not complete