create-task
Guides users through creating and evaluating Harbor tasks, covering setup, instruction writing, and verification methods.
Install this skill
or
36/100
Security score
The create-task skill was audited on May 17, 2026 and we found 10 security issues across 4 threat categories, including 3 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
medium line 228
Template literal with variable interpolation in command context
SourceSKILL.md
| 228 | ```toml |
high line 143
Piping content to sh shell
SourceSKILL.md
| 143 | curl -LsSf https://astral.sh/uv/0.9.7/install.sh | sh |
medium line 142
Curl to non-GitHub URL
SourceSKILL.md
| 142 | apt-get update && apt-get install -y curl |
low line 55
Access to hidden dotfiles in home directory
SourceSKILL.md
| 55 | Generate an SSH key pair in the files `~/.ssh/id_rsa` and `~/.ssh/id_rsa.pub`. |
low line 189
Access to hidden dotfiles in home directory
SourceSKILL.md
| 189 | ssh-keygen -t rsa -f ~/.ssh/id_rsa -N "" |
high line 55
Access to SSH directory
SourceSKILL.md
| 55 | Generate an SSH key pair in the files `~/.ssh/id_rsa` and `~/.ssh/id_rsa.pub`. |
high line 189
Access to SSH directory
SourceSKILL.md
| 189 | ssh-keygen -t rsa -f ~/.ssh/id_rsa -N "" |
low line 229
Access to .env file
SourceSKILL.md
| 229 | [verifier.env] |
medium line 352
Access to .env file
SourceSKILL.md
| 352 | `verifier.timeout_sec`, `verifier.env`, `verifier.user`, |
low line 143
External URL reference
SourceSKILL.md
| 143 | curl -LsSf https://astral.sh/uv/0.9.7/install.sh | sh |
Scanned on May 17, 2026
View Security Dashboard