Scanned skills

adobe/skills code-assessment

Checked the catalogued skill at code-assessment.

SkillTrust corpus scan 7 November 2026 v0.13.0 via skillsh Verify on GitHub
D AI-triaged 132
D Security

D; retained sample includes a medium finding · SD-008 · what this rule accepts as a false positive →

D Permissions

D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →

B Transparency

B set by findings not listed in the stored summary

showing 10 of 132
securitymedium SD-008
asset-manager/SKILL.md
permission_hygienehigh SD-003
asset-manager/SKILL.md
permission_hygienehigh SD-003
asset-manager/SKILL.md
permission_hygienehigh SD-003
asset-manager/SKILL.md
permission_hygienehigh SD-003
asset-manager/SKILL.md
permission_hygienehigh SD-003
asset-manager/SKILL.md
permission_hygienehigh SD-003
asset-manager/SKILL.md
permission_hygienehigh SD-003
asset-manager/SKILL.md
permission_hygienehigh SD-003
asset-manager/SKILL.md
permission_hygienehigh SD-003
asset-manager/SKILL.md
9 suppressed by AI triage
permission_hygienehigh SD-003 benign_example
inject-in-sling-model/recipe.md

The path traversal pattern appears only in a documentation link and not in executable code, so it poses no real threat.

permission_hygienehigh SD-003 benign_example
references/adding-a-pattern.md

The file is a documentation markdown that uses relative paths within the repository, not code that could be executed to traverse the filesystem.

permission_hygienehigh SD-003 benign_example
references/adding-a-pattern.md

The referenced paths point to sibling documentation files inside the repo, not to system directories; no executable path traversal risk.

permission_hygienehigh SD-003 benign_example
references/adding-a-pattern.md

This is a normal documentation reference to a README, not an attempt to access system files, so the path traversal alert is benign.

permission_hygienehigh SD-003 benign_example
references/aem-cloud-service-pattern-prerequisites.md

The path reference is used only in documentation, not in executable code, so it does not pose a security threat.

securityhigh SD-022 benign_example
references/git-workflow.md

The snippet is documentation text, not code, and does not contain any DNS tunneling activity.

permission_hygienehigh SD-003 benign_example
references/resource-resolver-logging.md

The absolute path /var/my-app is a JCR repository path in an ACL definition, not a file-system path traversal.

permission_hygienehigh SD-003 benign_example
references/resource-resolver-logging.md

The ../SKILL.md reference is a documentation link, not a malicious path traversal.

permission_hygienehigh SD-003 benign_example
references/scr-to-osgi-ds.md

The matched path is a relative link in documentation, not code that accesses files.