daymade/claude-code-skills douban-skill

Checked the catalogued skill at douban-skill.

SkillTrust corpus scan 22 September 2026 v0.10.0 via skillsh Verify on GitHub

F AI-triaged 12

D Security

D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →

F Permissions

F; retained sample includes a critical finding · SD-006 · what this rule accepts as a false positive →

A Transparency

A set by no findings on this axis

showing 10 of 12

securityhigh SD-007

scripts/douban-frodo-export.py

permission_hygienecritical SD-006

scripts/douban-frodo-export.py

securityhigh SD-007

scripts/douban-frodo-export.py

securityhigh SD-007

scripts/douban-frodo-export.py

securityhigh SD-007

scripts/douban-frodo-export.py

securityhigh SD-007

scripts/douban-frodo-export.py

securityhigh SD-007

scripts/douban-frodo-export.py

securityhigh SD-007

scripts/douban-frodo-export.py

securityhigh SD-007

scripts/douban-frodo-export.py

securityhigh SD-007

scripts/douban-frodo-export.py

4 suppressed by AI triage

transparencymedium SD-007 benign_example

references/troubleshooting.md

Describes an example curl command in documentation, not an actual outbound call.

securityhigh SD-007 benign_example

references/troubleshooting.md

Mentions a fetch() example in a doc; no real network call is performed.

securityhigh SD-007 benign_example

references/troubleshooting.md

Shows a fetch() script for manual export in documentation; no malicious action.

permission_hygienecritical SD-006 benign_example

references/troubleshooting.md

The apiKey appears to be a placeholder example in docs, not a live credential.