Scanned skills

cathrynlavery/diagram-design diagram-design

Checked the catalogued skill at diagram-design.

SkillTrust corpus scan 7 November 2026 v0.13.0 via skillsh Verify on GitHub
D AI-triaged 7
GitHub
D Security

D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →

D Permissions

D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →

A Transparency

A set by no findings on this axis

7 findings
permission_hygienehigh SD-003
references/export.md
securityhigh SD-007
scripts/export_svg.py
securityhigh SD-007
scripts/export_svg.py
securityhigh SD-007
scripts/export_svg.py
securityhigh SD-007
scripts/export_svg.py
securitymedium SD-008
scripts/export_svg.py
securitymedium SD-012
scripts/mermaid_extract.py
4 suppressed by AI triage
permission_hygienehigh SD-003 benign_example
references/doctor.md

The absolute path is only in documentation and does not provide a runtime path traversal vulnerability.

securityhigh SD-022 benign_example
references/primitive-terminal.md

The content describes a terminal UI skin, with no DNS queries or exfiltration behavior.

securitymedium SD-008 benign_example
references/type-fishbone.md

The line contains plain text documentation; no base64 string is actually present.

securitymedium SD-008 benign_example
scripts/drawio_extract.py

Base64 decoding is used to process user-provided diagram data, which is a legitimate operation and not indicative of malicious obfuscation.