Scanned skills

bitjaru/styleseed styleseed

Checked the catalogued skill at styleseed.

SkillTrust corpus scan 7 November 2026 v0.13.0 via skillsh Verify on GitHub
F AI-triaged 48
F Security

F set by findings not listed

D Permissions

D set by findings not listed

B Transparency

B; retained sample includes a medium finding · SD-007 · what this rule accepts as a false positive →

showing 10 of 48
transparencymedium SD-007
workflows/ss-resolve/references/artifact-index.schema.json
transparencymedium SD-007
workflows/ss-resolve/references/artifact-index.schema.json
transparencymedium SD-007
workflows/ss-resolve/references/artifact.schema.json
transparencymedium SD-007
workflows/ss-resolve/references/artifact.schema.json
transparencymedium SD-007
workflows/ss-resolve/references/catalog.json
transparencymedium SD-007
workflows/ss-resolve/references/catalog.json
transparencymedium SD-007
workflows/ss-resolve/references/catalog.json
transparencymedium SD-007
workflows/ss-resolve/references/catalog.json
transparencymedium SD-007
workflows/ss-resolve/references/catalog.json
transparencymedium SD-007
workflows/ss-resolve/references/catalog.json
3 suppressed by AI triage
permission_hygienehigh SD-003 benign_example
workflows/ss-audit/WORKFLOW.md

The path is a normal relative reference within the repository, not a ../ traversal that would escape the skill directory.

permission_hygienehigh SD-003 benign_example
workflows/ss-review/WORKFLOW.md

The link uses a relative path within the repo, not an absolute or executable path that could be exploited.

transparencymedium SD-007 benign_example
workflows/ss-score/references/acceptance-report.schema.json

Standard external JSON schema reference, not executing a call or granting broad permission.