skillsafe
Facilitates scanning, saving, sharing, and verifying AI skills through the SkillSafe secured skill registry.
Install this skill
Security score
The skillsafe skill was audited on May 12, 2026 and we found 16 security issues across 5 threat categories, including 3 critical. Review the findings below before installing.
Categories Tested
Security Issues
Direct command execution function call
| 64 | 1. **Python AST analysis** — detects `eval()`, `exec()`, `os.system()`, `subprocess.*`, etc. |
Eval function call - arbitrary code execution
| 64 | 1. **Python AST analysis** — detects `eval()`, `exec()`, `os.system()`, `subprocess.*`, etc. |
Eval function call - arbitrary code execution
| 65 | 2. **JS/TS regex analysis** — detects `eval()`, `new Function()`, `child_process`, etc. |
System command execution
| 64 | 1. **Python AST analysis** — detects `eval()`, `exec()`, `os.system()`, `subprocess.*`, etc. |
Node child_process module reference
| 65 | 2. **JS/TS regex analysis** — detects `eval()`, `new Function()`, `child_process`, etc. |
Python os.system command execution
| 64 | 1. **Python AST analysis** — detects `eval()`, `exec()`, `os.system()`, `subprocess.*`, etc. |
Curl to non-GitHub URL
| 27 | curl -fsSL https://skillsafe.ai/scripts/skillsafe.py -o "$SKILL_DIR/scripts/skillsafe.py" |
Access to hidden dotfiles in home directory
| 25 | SKILL_DIR="~/.agents/skills/skillsafe" |
Access to hidden dotfiles in home directory
| 57 | First checks if a saved API key in `~/.skillsafe/config.json` is still valid. If valid, prints account info and exits. If the key is missing, expired, or revoked, opens your browser to sign in (via Go |
Access to hidden dotfiles in home directory
| 97 | Downloads the archive, verifies the tree hash matches, scans the downloaded files, submits a verification report, and installs. **AI agents should always pass `--tool <self>`** where `<self>` is the a |
Access to hidden dotfiles in home directory
| 201 | Shows skills from multiple locations: all known tool directories (Claude Code, Cursor, Windsurf, Codex, Gemini, OpenCode, OpenClaw, Cline, Roo, Goose, Copilot, Kiro, Trae, AMP, Aider, VS Code, Antigra |
Access to hidden dotfiles in home directory
| 360 | Credentials are stored in `~/.skillsafe/config.json`. By default, `install` places skills in `.agents/skills/` in the current project directory and auto-symlinks into detected agent directories. Use ` |
Base64 decode operation
| 70 | 7. **base64 deep-scan** — decodes blobs and re-scans for hidden payloads |
External URL reference
| 27 | curl -fsSL https://skillsafe.ai/scripts/skillsafe.py -o "$SKILL_DIR/scripts/skillsafe.py" |
External URL reference
| 149 | > To **design and produce a polished showcase demo from scratch** (rather than recording an existing session), read `submit-skill-demo.md` in this skill's directory, or fetch it from `https://skillsaf |
External URL reference
| 356 | - "comment on a demo" / "reply to a comment" / "post a comment on demo dmo_..." -> read `submit-demo-comment.md` in this skill's directory, or fetch `https://skillsafe.ai/submit-demo-comment.md` |