SkillSpector · jobdanmark-search
independent scanner by NVIDIA · skill by peteedoo · how it works ↗
The skill uses 'network' capability that is not listed in its permissions. This may indicate deceptive intent or missing permission declarations.; Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance …; Dependencies lack version pinning, allowing potential malicious package updates. Consider pinning versions.
scanned 2026-08-23
Findings (8)
The skill uses 'network' capability that is not listed in its permissions. This may indicate deceptive intent or missing permission declarations.
cli/src/commands/detail.ts
Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.
cli/src/commands/categories.ts
Dependencies lack version pinning, allowing potential malicious package updates. Consider pinning versions.
cli/package.json
Dependencies lack version pinning, allowing potential malicious package updates. Consider pinning versions.
cli/package.json
Dependencies lack version pinning, allowing potential malicious package updates. Consider pinning versions.
cli/package.json
Dependencies lack version pinning, allowing potential malicious package updates. Consider pinning versions.
cli/package.json
Dependencies lack version pinning, allowing potential malicious package updates. Consider pinning versions.
cli/package.json
Dependencies lack version pinning, allowing potential malicious package updates. Consider pinning versions.
cli/package.json
What the verdicts mean
SkillSpector reports on SkillMD's shared five-tier scale. See how SkillSpector works ↗.
Overall severity LOW (risk score in the safe range)
Overall severity MEDIUM
Overall severity HIGH
Overall severity CRITICAL
Scan could not complete