Skill Scanner · claude-reflect
independent scanner by Cisco AI Defense · skill by nivkazdan · how it works ↗
WARNINGmax severity: HIGH
Code executes bash but Bash tool not in allowed-tools; Code uses search/grep patterns but Grep tool not in allowed-tools
scanned 2026-08-22
Findings (2)
HIGHunauthorized_tool_use
Code executes bash but Bash tool not in allowed-tools
C:\Users\mkyou\Documents\GitHub\Skillmd\apps\ingest\out\audit-local\skills\26193\SKILL.md
LOWunauthorized_tool_use
Code uses search/grep patterns but Grep tool not in allowed-tools
C:\Users\mkyou\Documents\GitHub\Skillmd\apps\ingest\out\audit-local\skills\26193\SKILL.md
What the verdicts mean
Skill Scanner reports on SkillMD's shared five-tier scale. See how Skill Scanner works ↗.
PASS
Reported as safe — no findings
CAUTION
Findings up to MEDIUM severity
WARNINGthis skill
Findings of HIGH severity
FAIL
Findings of CRITICAL severity
INCONCLUSIVE
Scan could not complete