Scanned skills

daymade/claude-code-skills github-ops

Checked the catalogued skill at github-ops.

SkillTrust corpus scan 8 November 2026 v0.13.0 via skillsh Verify on GitHub
D AI-triaged 3
D Security

D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →

D Permissions

D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →

A Transparency

A set by no findings on this axis

3 findings
permission_hygienehigh SD-003
references/pr_operations.md
securityhigh SD-007
references/pr_operations.md
permission_hygienehigh SD-003
references/workflow_operations.md
13 suppressed by AI triage
permission_hygienehigh SD-003 benign_example
references/api_reference.md

Reference to a relative path in a documentation link is benign and does not enable actual file access.

permission_hygienehigh SD-003 benign_example
references/best_practices.md

The matched pattern is a normal relative Markdown link, not an actual file path traversal.

permission_hygienehigh SD-003 benign_example
references/branch_protection.md

The reference uses a relative path within documentation and does not cause actual file access, so it is safe.

permission_hygienehigh SD-003 benign_example
references/ghcr_publishing.md

The reference to '../SKILL.md' is a relative path in documentation, not executable code, so no real path traversal risk.

permission_hygienehigh SD-003 benign_example
references/ghcr_publishing.md

The reference to '../SKILL.md' appears only in prose, not as a file operation, thus not a threat.

permission_hygienehigh SD-003 benign_example
references/issue_operations.md

The '../SKILL.md' link is a relative reference in documentation, not executable code that could access filesystem paths.

permission_hygienecritical SD-004 benign_example
references/multi_account_repository_sync.md

No credential path referenced, only a generic warning message was matched

permission_hygienehigh SD-003 benign_example
references/organization_access_and_settings.md

Relative path used only for documentation linking, not executed by code.

permission_hygienehigh SD-003 benign_example
references/pr_operations.md

No path traversal strings found.

permission_hygienehigh SD-003 benign_example
references/repository_operations.md

The path traversal pattern is part of a Markdown link in documentation, not executable code, and poses no real threat.

securitycritical SD-013 benign_example
references/workflow_operations.md

The match occurs in a documentation file, describing a persistence mechanism, not in executable code or configuration.

securityhigh SD-007 benign_example
references/workflow_operations.md

The match occurs in a documentation file, describing an outbound network call, not in executable code or configuration.

securityhigh SD-007 benign_example
references/workflow_operations.md

The match occurs in a documentation file, describing an outbound network call, not in executable code or configuration.