Scanned skills

daymade/claude-code-skills pdf-creator

Checked the catalogued skill at pdf-creator.

SkillTrust corpus scan 22 September 2026 v0.10.0 via skillsh Verify on GitHub
D AI-triaged 2
GitHub
A Security

A set by no findings on this axis

D Permissions

D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →

A Transparency

A set by no findings on this axis

2 findings
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
SKILL.md
3 suppressed by AI triage
permission_hygienehigh SD-003 benign_example
scripts/md_to_pdf.py

The path traversal is a hard‑coded relative path used to locate built‑in theme files, not influenced by user input.

permission_hygienehigh SD-003 benign_example
scripts/md_to_pdf.py

The absolute path is a hard‑coded, platform‑specific library location for configuring WeasyPrint, not a security vulnerability.

permission_hygienehigh SD-003 benign_example
scripts/tests/test_typography_lint.py

The absolute path is used only in a test mock, not in real code execution.