Scanned skills

anthropics/claude-plugins-official hook-development

Checked the catalogued skill at hook-development.

SkillTrust corpus scan 7 November 2026 v0.13.0 via skillsh Verify on GitHub
D AI-triaged 24
D Security

D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →

D Permissions

D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →

A Transparency

A set by no findings on this axis

showing 10 of 24
permission_hygienehigh SD-003
references/advanced.md
permission_hygienehigh SD-003
references/advanced.md
permission_hygienehigh SD-003
references/advanced.md
permission_hygienehigh SD-003
references/advanced.md
permission_hygienehigh SD-003
references/advanced.md
permission_hygienehigh SD-003
references/advanced.md
permission_hygienehigh SD-003
references/advanced.md
permission_hygienehigh SD-003
references/advanced.md
securityhigh SD-007
references/advanced.md
securityhigh SD-007
references/advanced.md
4 suppressed by AI triage
permission_hygienehigh SD-003 benign_example
examples/validate-write.sh

The script performs a defensive check to prevent writing to system directories, not an exploit.

permission_hygienehigh SD-003 benign_example
references/migration.md

The code snippet is included in documentation, not executed, so the path reference is a harmless example.

permission_hygienehigh SD-003 benign_example
references/patterns.md

Absolute path is in a user-configurable allowedPaths array, not a malicious traversal.

permission_hygienehigh SD-003 benign_example
scripts/README.md

The path traversal is part of a documented usage example in a README, not actual code that will be executed.