arrow_backAI Skill ShieldpublicDefault-branch GitHub scan
Trust report
402md/skillmd
The open spec for SKILL.md — how AI agents discover, understand, and pay for APIs
View scanned commit on GitHubopen_in_new0%Static score
60% score40% score gap
Highest finding: Critical severityLatest scan
critical severity
Static analysis score
Install decision
Do Not Install
Automatic execution surfaces were detected with critical or compounding risk. Hold installation until a reviewer clears the repo.
Scan identity
- Scanned
- 2026-08-08
- Commit
- 000db94621b7
- License
- Not detected
- Repository
- Active
Repository scan summary
- policyFindings
- 74
- terminalInstall surface
- 1
- Repository reach
- 0
Validation findings detected
Execution paths reviewed
GitHub stars
Highest-priority findings
The latest default-branch scan, ordered by severity.
- criticalEnvironment variables sent to external URLexamples/api-weather/SKILL.md:135
- criticalEnvironment variables sent to external URLexamples/saas-analytics/SKILL.md:209
- criticalEnvironment variables sent to external URLexamples/service-translation/SKILL.md:173
- mediumfetch() to external URLexamples/api-weather/SKILL.md:132
- mediumping to external hostexamples/api-weather/SKILL.md:12
Share this trust result
The badge stays linked to the latest default-branch scan for this skill path.
Do you consider this skill safe to use?
Community signals help prioritize human review; they do not change the scan verdict.
AI Skill Shield is an automated pre-install review, not a guarantee of safety. Confirm sensitive permissions and execution paths before installation.