owasp-security

Warn

Audited by ZeroLeaks on Apr 16, 2026

Risk Level: MEDIUM
Scan Summary

This skill looks mixed overall, with low confidence. The skill has 2 transparency concerns that weaken pre-use reviewability, mainly around potential hardcoded credential and obfuscated or encoded execution path. The scanned skill keeps data and instructions reasonably separate and does not strongly encourage the agent to treat external content as policy. Behavior analysis was not run.

Score
76/100
Verdict
WARNING
Confidence
low
Findings
2
Section Analysis (3)
TransparencyAT_RISK
39/100

The skill has 2 transparency concerns that weaken pre-use reviewability, mainly around potential hardcoded credential and obfuscated or encoded execution path.

Prompt InjectionPASS
92/100

The scanned skill keeps data and instructions reasonably separate and does not strongly encourage the agent to treat external content as policy.

Agent BehaviorSkipped

Behavior analysis was not run.

Findings (2)
CRITICAL

Potential hardcoded credential

HIGH

Obfuscated or encoded execution path

Coverage DetailsClick to expand
Discovered Files
1
Omitted Files
0
Analyzed Bytes
13.4 KB
Sections Completed
2
Sections Skipped
1
Behavior Probes
0/0
Audit Metadata
Score
76/100
Verdict
WARNING
Confidence
low
Sections
2/3 completed
Findings
2
Mode
risk
Files Scanned
1
Duration
0.2s
Analyzed
Apr 16, 2026, 01:05 PM
Security Audit — zeroleaks — owasp-security