Scanned skills

binance/binance-skills-hub academy-skill

Checked the catalogued skill at academy-skill.

SkillTrust corpus scan 27 October 2026 v0.13.0 via skillsh Verify on GitHub
D AI-triaged 16
D Security

D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →

A Permissions

A set by no findings on this axis

B Transparency

B; retained sample includes a medium finding · SD-007 · what this rule accepts as a false positive →

showing 10 of 16
securityhigh SD-007
env/prod.env
securityhigh SD-007
env/prod.env
securityhigh SD-007
env/prod.env
securityhigh SD-007
references/api-contract.md
transparencymedium SD-007
references/api-contract.md
transparencymedium SD-007
references/api-contract.md
transparencymedium SD-007
references/api-contract.md
transparencymedium SD-007
references/api-contract.md
transparencymedium SD-007
references/api-contract.md
securityhigh SD-007
references/api-contract.md
5 suppressed by AI triage
securityhigh SD-007 benign_example
README.md

Documentation includes a curl command example, not an executed or allowed call in code.

transparencymedium SD-007 benign_example
README.md

URL is listed in documentation only, no network call is performed by the code.

securityhigh SD-007 benign_example
README.md

Instruction to re-run curl commands is a documentation note, not an active outbound call.

permission_hygienehigh SD-003 benign_example
references/api-contract.md

The file is documentation with no actual path traversal strings present.

securityhigh SD-007 benign_example
scripts/academy-api.mjs

Documentation example illustrating outbound network call permission, not an active threat