Scanned skills

anthropics/knowledge-work-plugins rivet-sdk

Checked the catalogued skill at rivet-sdk.

SkillTrust corpus scan 22 September 2026 v0.10.0 via skillsh Verify on GitHub
D AI-triaged 7
A Security

A set by no findings on this axis

D Permissions

D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →

A Transparency

A set by no findings on this axis

7 findings
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
SKILL.md
1 suppressed by AI triage
permission_hygienehigh SD-003 benign_example
references/versioning-and-compatibility.md

The path traversal occurs only in a markdown link for documentation, not in executable code, so it poses no real threat.