Scanned skills

Affitor/affiliate-skills

Checked the catalogued skill.

SkillTrust corpus scan 28 October 2026 v0.13.0 via ghsearch Verify on GitHub
F AI-triaged 62
GitHub
F Security

F; retained sample includes a critical finding · SD-002 · what this rule accepts as a false positive →

D Permissions

D set by findings not listed

B Transparency

B; retained sample includes a medium finding · SD-007 · what this rule accepts as a false positive →

showing 10 of 62
transparencymedium SD-007
API.md
transparencymedium SD-007
API.md
securityhigh SD-007
API.md
transparencymedium SD-007
API.md
securitycritical SD-002
CLAUDE.md
securityhigh SD-007
CLAUDE.md
securityhigh SD-007
SKILL.md
securitycritical SD-009
SKILL.md
securityhigh SD-007
scripts/distribute.sh
securityhigh SD-007
scripts/distribute.sh
3 suppressed by AI triage
securityhigh SD-007 benign_example
.cursorrules

Static API URL reference in documentation does not perform outbound calls

transparencymedium SD-007 benign_example
shared/references/sample-api-response.json

The file contains documentation, not code, and only references a detected outbound call in text, not an actual network operation.

permission_hygienehigh SD-003 benign_example
tools/src/cli.ts

The flagged content is generic documentation; no actual path traversal code or file operations are present