1 medium finding.

This skill spawns subprocesses outside its declared capabilities.

0 critical0 high1 medium11 rules passed

Why grade A?

score · 95 / 100

The current grade reflects 1 minor finding below all thresholds.

0 CRIT0 HIGH1 MED0 LOW

Already at the top grade — no further rules to pass.

med

Arbitrary subprocess execution detected

The skill spawns subprocesses. Without a capability manifest declaring this, the skill could execute arbitrary commands.

rule: subprocess-executionline: 368CWE-78

▾

366 try:

367 # Convert using marp

368 subprocess.run([← spawns a subprocess outside declared capabilities

369 'marp', temp_path, '-o', output_path

370 ], check=True)

skillox.io/r/crawl-pncqy2wa9jhxp5h9j26lh5sl