1 file · 7 lines · 326 B
View on GitHub
- deadline-countdown.json 7 lines · 326 B
deadline-countdown.json
JSON
{
"description": "Deadline day statusline with git branch, changed files count, and countdown time..."
"statusLine": {
"type": "command"
"command": "python3 .claude/scripts/deadline-countdown.py"
}
}
Scanned by NVIDIA SkillSpector
Automated static analysis (no LLM) · v2.12.0 · 2026-10-17
4 observations
scanner score 22/100
SkillSpector looks for patterns such as shell commands, credential access, network calls or unpinned dependencies. An observation is something worth reading in the files before you install, not a confirmed vulnerability. Components that run code locally, like hooks, MCP servers and security tooling, naturally show more of them.
- Skill declares no tool scope ('permissions' or 'allowed-tools') but code capabilities were detected: env, shell.MCP Least Privilege · SKILL.md:1
- subprocess module call ×3Dangerous Code Execution · deadline-countdown.py:19
Learn more about NVIDIA SkillSpector or how components are reviewed.