SkillSpector · jobbank-search
independent scanner by NVIDIA · skill by peteedoo · how it works ↗
The skill uses 'network' capability that is not listed in its permissions. This may indicate deceptive intent or missing permission declarations.; Dependencies lack version pinning, allowing potential malicious package updates. Consider pinning versions.
scanned 2026-08-23
Findings (7)
The skill uses 'network' capability that is not listed in its permissions. This may indicate deceptive intent or missing permission declarations.
cli/src/commands/search.ts
Dependencies lack version pinning, allowing potential malicious package updates. Consider pinning versions.
cli/package.json
Dependencies lack version pinning, allowing potential malicious package updates. Consider pinning versions.
cli/package.json
Dependencies lack version pinning, allowing potential malicious package updates. Consider pinning versions.
cli/package.json
Dependencies lack version pinning, allowing potential malicious package updates. Consider pinning versions.
cli/package.json
Dependencies lack version pinning, allowing potential malicious package updates. Consider pinning versions.
cli/package.json
Dependencies lack version pinning, allowing potential malicious package updates. Consider pinning versions.
cli/package.json
What the verdicts mean
SkillSpector reports on SkillMD's shared five-tier scale. See how SkillSpector works ↗.
Overall severity LOW (risk score in the safe range)
Overall severity MEDIUM
Overall severity HIGH
Overall severity CRITICAL
Scan could not complete