Scanned skills

adobe/skills migrate

Checked the catalogued skill at migrate.

SkillTrust corpus scan 7 November 2026 v0.13.0 via skillsh Verify on GitHub
F AI-triaged 28
F Security

F; retained sample includes a critical finding · SD-001 · what this rule accepts as a false positive →

F Permissions

F; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →

A Transparency

A set by no findings on this axis

showing 10 of 28
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
SKILL.md
securitycritical SD-001
SKILL.md
permission_hygienehigh SD-003
SKILL.md
securityhigh SD-022
SKILL.md
permission_hygienehigh SD-003
reference/asset-bundling.md
permission_hygienehigh SD-003
reference/asset-bundling.md
permission_hygienehigh SD-003
reference/asset-bundling.md
6 suppressed by AI triage
permission_hygienehigh SD-003 benign_example
SKILL.md

No path traversal evidence in the context; the line contains only empty content.

securityhigh SD-022 benign_example
reference/content-preservation.md

The content describes standard link-rewriting logic, not actual DNS tunneling code

permission_hygienehigh SD-003 benign_example
scripts/migrate.mjs

Documentation file contains illustrative text, not executable code, so path traversal references are benign examples.

securityhigh SD-007 benign_example
scripts/test/migrate.test.mjs

The text is a documentation note describing a logged outbound call, not an executable network request.

securityhigh SD-007 benign_example
scripts/test/migrate.test.mjs

The flagged line appears in documentation text, not executable code, indicating a reference rather than an actual outbound network call.

securityhigh SD-007 benign_example
scripts/test/migrate.test.mjs

The line contains documentation text, not executable code or configuration that would perform outbound network calls.