Scanned skills

anthropics/claude-plugins-official build-mcp-app

Checked the catalogued skill at build-mcp-app.

SkillTrust corpus scan 19 September 2026 v0.10.0 via skillsh Verify on GitHub
D AI-triaged 13
D Security

D; retained sample includes a high finding · SD-022 · what this rule accepts as a false positive →

D Permissions

D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →

A Transparency

A set by no findings on this axis

showing 10 of 13
permission_hygienehigh SD-003
SKILL.md
securityhigh SD-022
SKILL.md
securityhigh SD-022
SKILL.md
securityhigh SD-022
SKILL.md
securityhigh SD-022
SKILL.md
securityhigh SD-022
SKILL.md
securityhigh SD-022
SKILL.md
securityhigh SD-022
SKILL.md
securityhigh SD-022
SKILL.md
securityhigh SD-022
SKILL.md
4 suppressed by AI triage
securityhigh SD-022 benign_example
references/apps-sdk-messages.md

The snippet is plain documentation and contains no DNS query or hostname construction.

securityhigh SD-022 benign_example
references/apps-sdk-messages.md

The content is a table of API fields, with no code that performs a DNS lookup.

securityhigh SD-007 benign_example
references/apps-sdk-messages.md

The text merely describes why a fetch call fails under CSP; no outbound network call is made.

securityhigh SD-022 benign_example
references/payload-budgeting.md

The content describes JSON parsing errors and payload size limits, with no evidence of DNS queries or exfiltration patterns.