langsmith-dataset

Pass

Audited by ZeroLeaks on Apr 15, 2026

Risk Level: LOW
Scan Summary

The skill's SKILL.md is mostly clear, but carries one notable transparency concern: it references remote script execution without establishing a review boundary, which weakens a reviewer's ability to fully assess what the skill will do at runtime. Instruction/data separation looks reasonable, and the scan did not surface strong prompt-injection vectors. However, behavior analysis was not run, so it's not possible to confirm whether loading this skill materially changes downstream agent behavior compared to a no-skill baseline—this gap, combined with the remote execution concern, supports the AT_RISK verdict. Confidence is medium because finite testing passed on injection risk, but the unresolved transparency issue and missing behavior validation leave meaningful uncertainty.

Score
82/100
Verdict
AT_RISK
Confidence
medium
Findings
1
Section Analysis (3)
TransparencyWARNING
61/100

The skill has 1 transparency concern that weaken pre-use reviewability, mainly around remote script execution without review boundary.

Prompt InjectionPASS
92/100

The scanned skill keeps data and instructions reasonably separate and does not strongly encourage the agent to treat external content as policy.

Agent BehaviorSkipped

Behavior analysis was not run.

Findings (1)
CRITICAL

Remote script execution without review boundary

Coverage DetailsClick to expand
Discovered Files
1
Omitted Files
0
Analyzed Bytes
9.7 KB
Sections Completed
2
Sections Skipped
1
Behavior Probes
0/0
Audit Metadata
Score
82/100
Verdict
AT_RISK
Confidence
medium
Sections
2/3 completed
Findings
1
Mode
risk
Files Scanned
1
Duration
123.3s
Analyzed
Apr 15, 2026, 08:18 PM
Security Audit — zeroleaks — langsmith-dataset