Scanned skills

adobe/skills appbuilder-testing

Checked the catalogued skill at appbuilder-testing.

SkillTrust corpus scan 3 October 2026 v0.13.0 via skillsh Verify on GitHub
D AI-triaged 8
D Security

D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →

D Permissions

D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →

B Transparency

B; retained sample includes a medium finding · SD-007 · what this rule accepts as a false positive →

8 findings
securityhigh SD-007
assets/uix-guest-mock-helper.js
permission_hygienehigh SD-003
assets/unit-test-template.js
securityhigh SD-007
references/component-testing-patterns.md
permission_hygienehigh SD-003
references/component-testing-patterns.md
permission_hygienehigh SD-003
references/component-testing-patterns.md
securityhigh SD-007
references/component-testing-patterns.md
transparencymedium SD-007
references/debugging.md
securityhigh SD-007
references/debugging.md
4 suppressed by AI triage
permission_hygienehigh SD-003 benign_example
assets/component-test-template.js

Relative import in a test file is a normal module resolution, not an arbitrary file system access.

permission_hygienehigh SD-003 benign_example
assets/component-test-template.js

The import uses a standard relative path within the project, not a security risk.

permission_hygienehigh SD-003 benign_example
assets/component-test-template.js

Commented-out import shows intentional path traversal for test component, not malicious.

securityhigh SD-007 benign_example
assets/mock-files-sdk.js

Documentation describes outbound calls; no actual code present.