alignment-reader
Parses task alignment documents to return structured JSON with warnings, ensuring clarity in project scope and criteria.
Install this skill
or
60/100
Security score
The alignment-reader skill was audited on May 21, 2026 and we found 4 security issues across 1 threat category, including 2 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
high line 12
Template literal with variable interpolation in command context
SourceSKILL.md
| 12 | Thin wrapper around `${CLAUDE_PLUGIN_ROOT}/scripts/alignment-read.sh`. The script parses `alignment.md` per the canonical grammar in `references/alignment-contract.md` v1.0 and emits structured JSON. |
medium line 44
Template literal with variable interpolation in command context
SourceSKILL.md
| 44 | ```bash |
medium line 50
Template literal with variable interpolation in command context
SourceSKILL.md
| 50 | ```bash |
high line 85
Template literal with variable interpolation in command context
SourceSKILL.md
| 85 | - `${CLAUDE_PLUGIN_ROOT}/scripts/alignment-read.sh` — the parser |
Scanned on May 21, 2026
View Security Dashboard