Scanned skills
bytedance/deer-flow skill-creator
Checked the catalogued skill at skill-creator.
D AI-triaged 2
A Security
A set by no findings on this axis
D Permissions
D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →
A Transparency
A set by no findings on this axis
2 findings
agents/grader.md
agents/grader.md
5 suppressed by AI triage
SKILL.md
Writing to a temporary /tmp location with a skill‑generated filename is harmless and does not allow traversal or access to protected system directories.
eval-viewer/generate_review.py
The URL references localhost only, used to start a local HTTP server for viewing, not external network activity.
scripts/generate_report.py
The reference to Google Fonts is a harmless external resource used for styling.
scripts/generate_report.py
The preconnect to Google Fonts is a benign optimization for web font loading.
scripts/generate_report.py
The stylesheet link to Google Fonts is a standard, harmless external stylesheet.