1 file · 23 lines · 800 B
View on GitHub
Moiri Gamboni fix: dangerous-command-blocker hook references wrong script path #367 a0b4da0Feb 23, 2026
- dangerous-command-blocker.json 23 lines · 800 B
dangerous-command-blocker.json
JSON
{
"description": "Advanced protection against dangerous shell commands with multi-level security. ..."
"supportingFiles": [
{3 keys}
]
"hooks": {
"PreToolUse": [1 item]
}
}
Scanned by NVIDIA SkillSpector
Automated static analysis (no LLM) · v2.12.0 · 2026-10-17
Partial analysis: some checks could not run on this component.
11 observations
scanner score 45/100
SkillSpector looks for patterns such as shell commands, credential access, network calls or unpinned dependencies. An observation is something worth reading in the files before you install, not a confirmed vulnerability. Components that run code locally, like hooks, MCP servers and security tooling, naturally show more of them.
- Tool Parameter Abuse ×4Tool Misuse · dangerous-command-blocker.py:39
- Tool Parameter Abuse ×3Tool Misuse · SKILL.md:3
- Tool Parameter Abuse ×3Tool Misuse · dangerous-command-blocker.json:2
- Skill declares no tool scope ('permissions' or 'allowed-tools') but code capabilities were detected: shell.MCP Least Privilege · SKILL.md:1
Learn more about NVIDIA SkillSpector.