daymade/claude-code-skills doc-to-markdown

Checked the catalogued skill at doc-to-markdown.

SkillTrust corpus scan 8 November 2026 v0.13.0 via skillsh Verify on GitHub

D AI-triaged 26

D Security

D set by findings not listed

D Permissions

D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →

A Transparency

A set by no findings on this axis

showing 10 of 26

permission_hygienehigh SD-003

assets/obsidian-links/nested-vault/products/equipment-book/01-questions.md

permission_hygienehigh SD-003

assets/obsidian-links/nested-vault/products/equipment-book/01-questions.md

permission_hygienehigh SD-003

references/conversion-examples.md

permission_hygienehigh SD-003

references/conversion-examples.md

permission_hygienehigh SD-003

references/conversion-examples.md

permission_hygienehigh SD-003

references/conversion-examples.md

permission_hygienehigh SD-003

references/conversion-examples.md

permission_hygienehigh SD-003

references/conversion-examples.md

permission_hygienehigh SD-003

references/conversion-examples.md

permission_hygienehigh SD-003

references/conversion-examples.md

5 suppressed by AI triage

permission_hygienehigh SD-003 benign_example

SKILL.md

Absolute path appears in a documentation example, not in executable code.

permission_hygienehigh SD-003 benign_example

references/tool-comparison.md

The link refers to a relative Markdown file within the same skill, not executable code that can access arbitrary filesystem paths.

securitymedium SD-012 benign_example

scripts/batch_html.py

The code simply checks a command-line argument; it does not execute a post-install hook.

securityhigh SD-007 benign_example

scripts/html_to_markdown.py

The code only inserts a static SVG namespace attribute; it does not perform an outbound network request.

permission_hygienehigh SD-003 benign_example

scripts/test_reader_pilot_gate.py

The file is documentation prose with no actual path traversal content.