incident-response-incident-response
github.com/sickn33/antigravity-awesome-skills
AI SkillCommit e36d6fd3b3f6
Trust Assessment
incident-response-incident-response received a trust score of 81/100, placing it in the Mostly Trusted category. This skill has passed most security checks with only minor considerations noted.
SkillShield's automated analysis identified 2 findings: 0 critical, 1 high, 1 medium, and 0 low severity. Key findings include Potential Prompt Injection via user-controlled arguments in sub-agent prompts, Direct instruction to host LLM for local file access.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Layer Breakdown
| Layer | Description | Score |
|---|---|---|
| Manifest Analysis | Validates SKILL.md schema, permissions declarations, and tool configurations | 100% |
| Static Code Analysis | Scans source code for dangerous patterns, injection risks, and unsafe operations | 100% |
| Dependency Graph | Checks dependencies for known vulnerabilities and supply chain risks | 100% |
| LLM Behavioral Safety | AI-powered semantic analysis of tool behavior and data flow patterns | 78% |
Behavioral Risk Signals
| Finding | Count |
|---|---|
| Network Access | 1 finding |
| Filesystem Write | 1 finding |
| Shell Execution | 1 finding |
| Dynamic Code | 1 finding |
| Excessive Permissions | 2 findings |
Security Findings
| Severity | Finding | Layer | Location |
|---|---|---|---|
| HIGH | Potential Prompt Injection via user-controlled arguments in sub-agent prompts. The skill constructs prompts for various sub-agents by interpolating the \$ARGUMENTS variable. If \$ARGUMENTS contains user-controlled input without proper sanitization, a malicious user could inject instructions into the sub-agent's prompt. Implement robust input sanitization and validation for \$ARGUMENTS. |
LLM | SKILL.md:47 |
| MEDIUM | Direct instruction to host LLM for local file access. Remove direct instructions to the host LLM from skill descriptions. If file access is genuinely required, it should be mediated through a secure, explicit tool call. | LLM | SKILL.md:30 |
Scan History
Scan History
| Date | Score | Notes |
|---|---|---|
| 3 months ago | 100 | |
| 2 months ago | 81 | +2 new findings |
Embed Code
Markdown