Caveat verdict
skill-vetter-plus
A lightweight security scanner with nine detection signatures that runs a local Python script; dynamic_eval capability is likely for detecting eval patterns in target scanned files rather than self-execution.
⚠ Flagged for review — coarse, uncorroborated signal, not a confirmed exploit. Review the config yourself before installing.
Automated static analysis — not a human review. Caveat flags capabilities, not confirmed intent, and can produce false positives. Disagree with this verdict? Use Dispute below.
Findings (5)
Uses eval() — can execute arbitrary code
SKILL.md · code · eval(
Prompt injection — tries to override agent instructions
SKILL.md · prose · downgraded · ignore previous instructions
Uses exec() — may execute shell commands
SKILL.md · prose · downgraded · exec(
os.system/popen — direct OS command execution
SKILL.md · prose · downgraded · os.system(
Python urllib.request — network access
SKILL.md · prose · downgraded · urllib.request
Why the tier is capped
Execution sink present in raw bytes (Hard Floor: class B/D). Final tier capped at Caution — cannot be lifted by any downgrade, example-payload opt-in, or allowlist.
Permissions & capabilities
No declared permissions — minimal attack surface.
dynamic_eval Is this flag fair?
Thanks — recorded.