skill-subsonic-control636-agent-shield-skill · by Install
$ agentstack add skill-subsonic-control636-agent-shield-skill Open-source listing, not yet scanned by AgentStack. Follow the source repository for install instructions.
Security review
⚠ Flagged1 finding(s); flagged for manual review. · v0.1.0 How review works →
- • Prompt-injection patterns
- • Secret / credential exfiltration
- • Dangerous shell & filesystem operations
- • Untrusted network calls
- • Known-malicious package signatures
- high Dangerous shell/eval execution.
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ● Environment & secrets Used
- ● Dynamic code execution Used
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
AgentShield — Security Scanner
Scan any directory for security issues in AI agent skills, MCP servers, and plugins.
Usage
# Basic scan
npx @elliotllliu/agent-shield scan ./path/to/skill/
# Pre-install check (GitHub URL, npm package, or local path)
npx @elliotllliu/agent-shield install-check https://github.com/user/repo
# JSON output for programmatic use
npx @elliotllliu/agent-shield scan ./path/to/skill/ --json
# Fail if score is below threshold
npx @elliotllliu/agent-shield scan ./path/to/skill/ --fail-under 70
# Scan .difypkg plugin archives
npx @elliotllliu/agent-shield scan ./plugin.difypkgWhat It Detects (30 rules)
High Risk:
data-exfil— reads sensitive files + sends HTTP requestsbackdoor— eval(), exec(), dynamic code executionreverse-shell— outbound socket to shellcrypto-mining— mining pool connectionscredential-hardcode— hardcoded API keys/tokensobfuscation— base64+eval, hex stringsprompt-injection— 55+ patterns, 12 categories, 8 languagestool-shadowing— tool name/description manipulationattack-chain— multi-step kill chain (5 stages)cross-file— cross-file data flow and code injectionast-*— Python AST taint tracking (eval, pickle, SQL injection, SSTI)multilang-injection— 8-language prompt injectiondescription-integrity— semantic mismatch between description and codemcp-runtime— MCP server runtime security issues
Medium Risk:
env-leak— process.env exfiltrationnetwork-ssrf— user-controlled URLs, SSRFprivilege— SKILL.md permission vs code mismatchsupply-chain— known CVEs in dependenciessensitive-read— SSH keys, AWS creds accessphone-home— periodic beacon/heartbeat patternpython-security— 35 Python-specific patterns
Low Risk:
excessive-perms— too many permissions declaredhidden-files— .env with secrets committedtyposquatting— suspicious npm package names
Interpreting Results
- Score 90-100: Low risk ✅
- Score 70-89: Moderate risk — review warnings
- Score 40-69: High risk — investigate before using
- Score 0-39: Critical risk — do not install
When to Use
- Before installing a third-party skill:
npx @elliotllliu/agent-shield install-check - Auditing your own skills before publishing
- CI/CD pipeline gate:
--fail-under 70 - Reviewing skills from untrusted sources
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: Subsonic-control636
- Source: Subsonic-control636/agent-shield
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.