Scanned skills

bmad-code-org/bmad-method bmad-deep-recon

Checked the catalogued skill at bmad-deep-recon.

SkillTrust corpus scan 8 November 2026 v0.13.0 via skillsh Verify on GitHub
A AI-triaged 0
A Security

A set by no findings on this axis

A Permissions

A set by no findings on this axis

A Transparency

A set by no findings on this axis

0 findings

No issues flagged by the static checks in the scanned files.

12 suppressed by AI triage
securityhigh SD-007 benign_example
scripts/tests/test_recon_kit.py

Reference to https://example.com/g appears only in a markdown table, not an executable network request.

securityhigh SD-007 benign_example
scripts/tests/test_recon_kit.py

Reference to https://example.com/x is only present in test data, not an active outbound call.

securityhigh SD-007 benign_example
scripts/tests/test_recon_kit.py

The URL appears in expected HTML output of a test, not as an executed network call.

securityhigh SD-007 benign_example
scripts/tests/test_recon_kit.py

URL in test string is part of expected output, not an actual request.

securityhigh SD-007 benign_example
scripts/tests/test_recon_kit.py

URL in test string is part of expected output, not an actual request.

securityhigh SD-007 benign_example
scripts/tests/test_recon_kit.py

URL in test string is part of expected output, not an actual request.

securityhigh SD-007 benign_example
scripts/tests/test_recon_kit.py

URL in test string is part of expected output, not an actual request.

permission_hygienehigh SD-003 benign_example
scripts/tests/test_recon_kit.py

The scanner misidentified a code snippet as a Windows absolute path; no traversal occurs.

permission_hygienehigh SD-003 benign_example
scripts/tests/test_recon_kit.py

Relative paths used in tests for path normalization are safe and intentional.

permission_hygienehigh SD-003 benign_example
scripts/tests/test_recon_kit.py

Same benign test path as in finding 9.

permission_hygienehigh SD-003 benign_example
scripts/tests/test_recon_kit.py

Same benign test path as in findings 9 and 10.

securityhigh SD-007 benign_example
scripts/tests/test_recon_kit.py

URL appears in a test string; no network operation is performed.