Adding a Skill
Enables agents to create and manage skills for various interactions, enhancing their capabilities in executing tasks.
Install this skill
or
81/100
Security score
The Adding a Skill skill was audited on May 27, 2026 and we found 7 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 253
Template literal with variable interpolation in command context
SourceSKILL.md
| 253 | `https://api.search.brave.com/res/v1/web/search?q=${encodeURIComponent(query)}&count=${count}`, |
medium line 258
Template literal with variable interpolation in command context
SourceSKILL.md
| 258 | return { success: false, error: `Brave Search API error: ${response.status} ${response.statusText}` }; |
medium line 269
Template literal with variable interpolation in command context
SourceSKILL.md
| 269 | return { success: false, error: `web-search failed: ${message}` }; |
low line 283
Access to .env file
SourceSKILL.md
| 283 | * Maps name → env var (e.g. 'brave_api_key' → process.env.BRAVE_API_KEY). |
low line 253
External URL reference
SourceSKILL.md
| 253 | `https://api.search.brave.com/res/v1/web/search?q=${encodeURIComponent(query)}&count=${count}`, |
low line 403
External URL reference
SourceSKILL.md
| 403 | json: async () => ({ web: { results: [{ title: 'A', url: 'https://a.com' }] }, query: { total_count: 1 } }), |
low line 476
External URL reference
SourceSKILL.md
| 476 | url: https://mcp-github.example.com/sse |
Scanned on May 27, 2026
View Security Dashboard