← back to kiro-social-onboarder

Skill Scanner · kiro-social-onboarder

independent scanner by Cisco AI Defense · skill by zero-yx · how it works ↗

WARNINGmax severity: HIGH

Undeclared network usage; Skill does not specify a license; Outbound network request primitives in JavaScript/TypeScript; +2 more

scanned 2026-08-22

Findings (9)

MEDIUMunauthorized_tool_use

Undeclared network usage

C:\Users\mkyou\Documents\GitHub\Skillmd\apps\ingest\out\audit-local\skills\20272\SKILL.md

INFOpolicy_violation

Skill does not specify a license

SKILL.md

MEDIUMdata_exfiltration

Outbound network request primitives in JavaScript/TypeScript

scripts\drive_kiro_social_github.mjs:19

MEDIUMdata_exfiltration

Outbound network request primitives in JavaScript/TypeScript

scripts\drive_kiro_social_google.mjs:19

MEDIUMdata_exfiltration

Outbound network request primitives that can transmit data externally

scripts\onboard_kiro_social_github.py:75

MEDIUMdata_exfiltration

Outbound network request primitives that can transmit data externally

scripts\onboard_kiro_social_github.py:266

HIGHresource_abuse

Infinite loop without clear exit condition

scripts\onboard_kiro_social_github.py:554

MEDIUMdata_exfiltration

Outbound network request primitives that can transmit data externally

scripts\onboard_kiro_social_google.py:73

MEDIUMdata_exfiltration

Outbound network request primitives that can transmit data externally

scripts\onboard_kiro_social_google.py:104

What the verdicts mean

Skill Scanner reports on SkillMD's shared five-tier scale. See how Skill Scanner works ↗.

PASS

Reported as safe — no findings

CAUTION

Findings up to MEDIUM severity

WARNINGthis skill

Findings of HIGH severity

FAIL

Findings of CRITICAL severity

INCONCLUSIVE

Scan could not complete