Scanned skills

amd/skills local-ai-use

Checked the catalogued skill at local-ai-use.

SkillTrust corpus scan 7 November 2026 v0.13.0 via skillsh Verify on GitHub
F AI-triaged 17
F Security

F; retained sample includes a critical finding · SD-013 · what this rule accepts as a false positive →

A Permissions

A set by no findings on this axis

A Transparency

A set by no findings on this axis

showing 10 of 17
securitycritical SD-013
SKILL.md
securitycritical SD-013
SKILL.md
securitycritical SD-013
SKILL.md
securityhigh SD-007
scripts/setup_local_ai.py
securityhigh SD-007
scripts/setup_local_ai.py
securityhigh SD-007
scripts/setup_local_ai.py
securityhigh SD-007
scripts/setup_local_ai.py
securityhigh SD-007
scripts/setup_local_ai.py
securityhigh SD-007
scripts/setup_local_ai.py
securityhigh SD-007
scripts/setup_local_ai.py
8 suppressed by AI triage
securityhigh SD-007 benign_example
scripts/setup_local_ai.py

The file contains documentation, not code, and only references a detected outbound call in text, not an actual network operation.

securityhigh SD-007 benign_example
scripts/setup_local_ai.py

Documentation referencing outbound calls, no actual execution

securityhigh SD-007 benign_example
scripts/setup_local_ai.py

Descriptive mention of outbound call capability in docs.

securityhigh SD-007 benign_example
templates/local-ai-rule.md

Shows a normal curl request for an API, part of legitimate documentation.

securitymedium SD-008 benign_example
templates/local-ai-rule.md

Base64 decode is used to process API response data, not malicious obfuscation.

securitymedium SD-008 benign_example
templates/local-ai-rule.md

Decoding base64 from API response is a legitimate operation in this context.

securityhigh SD-007 benign_example
templates/local-ai-rule.md

Example of a curl POST to an external service for text-to-speech in documentation.

securityhigh SD-007 benign_example
templates/local-ai-rule.md

Curl request for speech-to-text is a normal, documented network call.