Scanned skills

antfu/skills antfu-create-pr

Checked the catalogued skill at antfu-create-pr.

SkillTrust corpus scan 6 November 2026 v0.13.0 via skillsh Verify on GitHub
A AI-triaged 0
A Security

A set by no findings on this axis

A Permissions

A set by no findings on this axis

A Transparency

A set by no findings on this axis

0 findings

No issues flagged by the static checks in the scanned files.

6 suppressed by AI triage
permission_hygienehigh SD-003 benign_example
references/visual-evidence.md

Example usage of /tmp in documentation, not executable.

permission_hygienehigh SD-003 benign_example
references/visual-evidence.md

Documentation example, safe usage of /tmp.

permission_hygienehigh SD-003 benign_example
references/visual-evidence.md

The path appears in a documented example, not in active code.

securityhigh SD-007 benign_example
scripts/upload-github-attachment.sh

The script performs a legitimate upload to GitHub using curl, which is expected behavior for uploading attachments.

securityhigh SD-007 benign_example
scripts/upload-github-attachment.sh

The outbound request targets GitHub's uploads API, a known and benign service used for attachment uploads.

securityhigh SD-007 benign_example
scripts/upload-github-attachment.sh

The script verifies the returned URL against GitHub's user-attachment domain, confirming expected behavior.