← back to sillytavern-cards

Skill Scanner · sillytavern-cards

independent scanner by Cisco AI Defense · skill by pearyj · how it works ↗

WARNINGmax severity: HIGH

Skill does not specify a license; Dangerous data flow in command pipeline; Node.js filesystem access that could read or write sensitive data

scanned 2026-08-22

Findings (6)

INFOpolicy_violation

Skill does not specify a license

SKILL.md

HIGHcommand_injection

Dangerous data flow in command pipeline

SKILL.md:2

HIGHcommand_injection

Dangerous data flow in command pipeline

SKILL.md:2

MEDIUMcommand_injection

Dangerous data flow in command pipeline

SKILL.md:2

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

extract-card.js:75

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

extract-card.js:104

What the verdicts mean

Skill Scanner reports on SkillMD's shared five-tier scale. See how Skill Scanner works ↗.

PASS

Reported as safe — no findings

CAUTION

Findings up to MEDIUM severity

WARNINGthis skill

Findings of HIGH severity

FAIL

Findings of CRITICAL severity

INCONCLUSIVE

Scan could not complete