daymade/claude-code-skills qa-expert

Checked the catalogued skill at qa-expert.

SkillTrust corpus scan 22 September 2026 v0.10.0 via skillsh Verify on GitHub

F AI-triaged 6

F Security

F; retained sample includes a critical finding · SD-013 · what this rule accepts as a false positive →

F Permissions

F; retained sample includes a critical finding · SD-004 · what this rule accepts as a false positive →

A Transparency

A set by no findings on this axis

6 findings

securitycritical SD-013

references/day1_onboarding.md

securitycritical SD-013

references/day1_onboarding.md

permission_hygienehigh SD-003

references/master_qa_prompt.md

permission_hygienehigh SD-003

references/master_qa_prompt.md

permission_hygienehigh SD-003

references/master_qa_prompt.md

permission_hygienecritical SD-004

references/master_qa_prompt.md

4 suppressed by AI triage

securitymedium SD-008 benign_example

assets/templates/TEST-CASE-TEMPLATE.md

The file contains only a template and no actual Base64-encoded data is present.

permission_hygienehigh SD-003 benign_example

assets/templates/TEST-CASE-TEMPLATE.md

The reference to path traversal is part of a documented test case, not an active exploitation.

permission_hygienecritical SD-004 benign_example

assets/templates/TEST-CASE-TEMPLATE.md

The mention of /etc/passwd is for a test scenario, not actual credential access.

securityhigh SD-007 benign_example

references/llm_prompts_library.md

Documentation only, instructs a harmless curl to localhost for debugging, not a malicious or broad outbound network call.

daymade/claude-code-skills › qa-expert