Scanned skills

briiirussell/cybersecurity-skills secrets-audit

Checked the catalogued skill at secrets-audit.

SkillTrust corpus scan 3 November 2026 v0.13.0 via skillsh Verify on GitHub
D AI-triaged 2
D Security

D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →

A Permissions

A set by no findings on this axis

A Transparency

A set by no findings on this axis

2 findings
securityhigh SD-007
SKILL.md
securityhigh SD-007
references/findings-format.md
7 suppressed by AI triage
transparencymedium SD-007 benign_example
references/findings.schema.json

$schema field merely references an external schema, not an active outbound network call or permission grant.

transparencymedium SD-007 benign_example
references/findings.schema.json

$id field is a reference URI, not an active outbound call or permission grant.

securityhigh SD-007 benign_example
references/to-sarif.mjs

The code only constructs a URL string for documentation, not performing a network call.

securityhigh SD-007 benign_example
references/to-sarif.mjs

It sets a JSON schema URL string; no network request is made.

securityhigh SD-007 benign_example
references/to-sarif.mjs

The informationUri is a static GitHub URL; the code does not perform any outbound call.

securityhigh SD-007 benign_example
references/verification.md

The outbound network call is part of a documentation example, not executed code.

securityhigh SD-007 benign_example
references/verification.md

The curl example appears only in documentation for permitted live checks, not actual code.