Scanned skills

aliyun/alibabacloud-aiops-skills alibabacloud-dms-skill

Checked the catalogued skill at alibabacloud-dms-skill.

SkillTrust corpus scan 8 November 2026 v0.13.0 via skillsh Verify on GitHub
D AI-triaged 9
A Security

A set by no findings on this axis

D Permissions

D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →

B Transparency

B; retained sample includes a medium finding · SD-007 · what this rule accepts as a false positive →

9 findings
transparencymedium SD-007
references/cli-installation-guide.md
permission_hygienehigh SD-003
references/cli-installation-guide.md
transparencymedium SD-007
references/cli-installation-guide.md
permission_hygienehigh SD-003
references/cli-installation-guide.md
transparencymedium SD-007
references/cli-installation-guide.md
permission_hygienehigh SD-003
references/cli-installation-guide.md
transparencymedium SD-007
references/cli-installation-guide.md
permission_hygienehigh SD-003
references/cli-installation-guide.md
permission_hygienehigh SD-003
references/cli-installation-guide.md
2 suppressed by AI triage
securityhigh SD-007 benign_example
SKILL.md

The outbound network call is a standard installation command to a known trusted URL documented in the skill manifest, not executed code.

securitycritical SD-009 benign_example
SKILL.md

The curl | bash pattern appears only as user instruction in documentation, not as executed code within the agent.