SkillSpector · qa-expert

Without declared permissions the skill's intent is opaque and cannot be validated.

SKILL.md

npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.

references/day1_onboarding.md

npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.

references/master_qa_prompt.md

Skill reads from agent configuration directories (.claude/, .codex/, .gemini/). These directories may contain API keys, personal settings, and other credentials that the skill has no legitimate need to access.

assets/templates/TEST-CASE-TEMPLATE.md

Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.

assets/templates/TEST-CASE-TEMPLATE.md

Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

SKILL.md

Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

SKILL.md

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

assets/templates/TEST-CASE-TEMPLATE.md

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

references/master_qa_prompt.md