Scanned skills

daymade/claude-code-skills cli-demo-generator

Checked the catalogued skill at cli-demo-generator.

SkillTrust corpus scan 8 November 2026 v0.13.0 via skillsh Verify on GitHub
D AI-triaged 22
C Security

C; retained sample includes a medium finding · SD-008 · what this rule accepts as a false positive →

D Permissions

D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →

A Transparency

A set by no findings on this axis

showing 10 of 22
permission_hygienehigh SD-003
SKILL.md
securitymedium SD-008
SKILL.md
permission_hygienehigh SD-003
SKILL.md
securitymedium SD-008
SKILL.md
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
references/advanced_patterns.md
securitymedium SD-008
references/advanced_patterns.md
permission_hygienehigh SD-003
references/advanced_patterns.md
securitymedium SD-008
references/advanced_patterns.md
4 suppressed by AI triage
transparencymedium SD-007 benign_example
assets/examples/batch-config.yaml

The entry is a standard git clone in an example configuration, typical benign use.

permission_hygienehigh SD-003 benign_example
scripts/auto_generate_demo.py

The script writes a temporary file to /tmp for execution, which is a common and safe practice.

securitymedium SD-008 benign_example
scripts/auto_generate_demo.py

Base64 is used only to encode a harmless wrapper function, not for obfuscating malicious code.

permission_hygienehigh SD-003 benign_example
scripts/auto_generate_demo.py

The script creates a temporary file in /tmp for GIF processing, which is legitimate.