Security audit

Permission Manifest Guard

Security checks for vulnerabilities and agentic risk

Overview

The skill appears to be a coherent static permission scanner; it reads a chosen skill folder and writes a manifest, with no artifact-backed evidence of credential theft, hidden network exfiltration, or unsafe automatic execution.

This skill looks safe to use for its stated purpose if you run it on a specific skill directory you intend to review. Verify the npx package/provenance before execution, avoid pointing it at broad private folders, and protect or delete permission-manifest.json if it contains sensitive paths, domains, commands, or env var names.

Static analysis

Detected: suspicious.dangerous_exec, suspicious.dynamic_code_execution, suspicious.env_credential_access (+1 more)

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: src/extract.ts:1089

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: tests/classify.test.ts:335

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: tests/cli.test.ts:23

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: tests/extract.test.ts:106

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: tests/fixtures/sample-skill/index.ts:13

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: tests/metadata-mismatch.test.ts:131

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: tests/shell-command.test.ts:13

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: tests/unit/extract.test.ts:24

Dynamic code execution detected.

Critical

Code: suspicious.dynamic_code_execution
Location: src/classify.ts:126

Dynamic code execution detected.

Critical

Code: suspicious.dynamic_code_execution
Location: tests/classify.test.ts:495

Dynamic code execution detected.

Critical

Code: suspicious.dynamic_code_execution
Location: tests/policy.test.ts:286

Dynamic code execution detected.

Critical

Code: suspicious.dynamic_code_execution
Location: tests/render.test.ts:205

Dynamic code execution detected.

Critical

Code: suspicious.dynamic_code_execution
Location: tests/risky-capability.test.ts:11

Environment variable access combined with network send.

Critical

Code: suspicious.env_credential_access
Location: tests/index.test.ts:61

Sensitive-looking file read is paired with a network send.

Warn

Code: suspicious.potential_exfiltration
Location: tests/extract.test.ts:1060

Sensitive-looking file read is paired with a network send.

Warn

Code: suspicious.potential_exfiltration
Location: tests/index.test.ts:248