Scanned skills

daymade/claude-code-skills qa-expert

Checked the catalogued skill at qa-expert.

SkillTrust corpus scan 8 November 2026 v0.13.0 via skillsh Verify on GitHub
F AI-triaged 3
C Security

C; retained sample includes a medium finding · SD-008 · what this rule accepts as a false positive →

F Permissions

F; retained sample includes a critical finding · SD-004 · what this rule accepts as a false positive →

A Transparency

A set by no findings on this axis

3 findings
securitymedium SD-008
assets/templates/TEST-CASE-TEMPLATE.md
permission_hygienehigh SD-003
assets/templates/TEST-CASE-TEMPLATE.md
permission_hygienecritical SD-004
assets/templates/TEST-CASE-TEMPLATE.md
3 suppressed by AI triage
securitycritical SD-013 benign_example
references/day1_onboarding.md

The content is a legitimate documentation instruction to add a command to a shell rc file for convenience, not malicious persistence.

securitycritical SD-013 benign_example
references/day1_onboarding.md

The content is a normal documentation note about reloading the shell, not a malicious persistence mechanism.

securityhigh SD-007 benign_example
references/llm_prompts_library.md

Diagnostic curl to localhost in documentation, not an actual outbound call.