← back to impeccable

Skill Scanner · impeccable

independent scanner by Cisco AI Defense · skill by SamyakJhaveri · how it works ↗

FAILmax severity: CRITICAL

Skill declares no Write tool but bundled scripts write files; Code uses search/grep patterns but Grep tool not in allowed-tools; Node.js filesystem access that could read or write sensitive data; +2 more

scanned 2026-08-22

Findings (20)

MEDIUMpolicy_violation

Skill declares no Write tool but bundled scripts write files

C:\Users\mkyou\Documents\GitHub\Skillmd\apps\ingest\out\audit-local\skills\20749\SKILL.md

LOWunauthorized_tool_use

Code uses search/grep patterns but Grep tool not in allowed-tools

C:\Users\mkyou\Documents\GitHub\Skillmd\apps\ingest\out\audit-local\skills\20749\SKILL.md

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

scripts\context-signals.mjs:48

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

scripts\context.mjs:86

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

scripts\context.mjs:123

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

scripts\context.mjs:133

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

scripts\context.mjs:142

MEDIUMdata_exfiltration

Outbound network request primitives in JavaScript/TypeScript

scripts\context.mjs:161

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

scripts\critique-storage.mjs:110

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

scripts\critique-storage.mjs:178

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

scripts\critique-storage.mjs:195

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

scripts\detector\cli\main.mjs:53

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

scripts\detector\cli\main.mjs:209

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

scripts\detector\cli\main.mjs:226

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

scripts\detector\engines\browser\detect-url.mjs:121

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

scripts\detector\engines\static-html\css-cascade.mjs:851

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

scripts\detector\engines\static-html\detect-html.mjs:108

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

scripts\detector\node\file-system.mjs:60

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

scripts\detector\node\file-system.mjs:131

MEDIUMdata_exfiltration

Outbound network request primitives in JavaScript/TypeScript

scripts\detector\node\file-system.mjs:162

What the verdicts mean

Skill Scanner reports on SkillMD's shared five-tier scale. See how Skill Scanner works ↗.

PASS

Reported as safe — no findings

CAUTION

Findings up to MEDIUM severity

WARNING

Findings of HIGH severity

FAILthis skill

Findings of CRITICAL severity

INCONCLUSIVE

Scan could not complete