Scanned skills

daymade/claude-code-skills transcript-fixer

Checked the catalogued skill at transcript-fixer.

SkillTrust corpus scan 8 November 2026 v0.13.0 via skillsh Verify on GitHub
F AI-triaged 63
F Security

F; retained sample includes a critical finding · SD-013 · what this rule accepts as a false positive →

F Permissions

F; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →

A Transparency

A set by no findings on this axis

showing 10 of 63
securityhigh SD-007
CHANGELOG.md
permission_hygienehigh SD-003
references/advanced_correction_evidence.md
permission_hygienehigh SD-003
references/advanced_correction_evidence.md
permission_hygienehigh SD-003
references/advanced_correction_evidence.md
permission_hygienehigh SD-003
references/native_entity_triage.md
securityhigh SD-007
references/review_queue_dashboard.md
securitycritical SD-013
references/team_collaboration.md
securitycritical SD-013
references/team_collaboration.md
securityhigh SD-007
scripts/core/defaults.py
securityhigh SD-007
scripts/ensure_deps.py
6 suppressed by AI triage
transparencymedium SD-007 benign_example
references/dictionary_identity_and_context.md

example curl command in documentation, not an active outbound call

securitycritical SD-013 benign_example
references/glm_api_setup.md

The text merely warns against persisting an API key, not indicating actual persistence

securitycritical SD-013 benign_example
references/installation_setup.md

The content is a warning not an actual persistence configuration

securityhigh SD-007 benign_example
scripts/fix_transcript_enhanced.py

The line only prints a URL reference; it does not perform an outbound network call or grant permissions for such calls.

securitymedium SD-012 benign_example
scripts/native_review.py

Script defines a CLI command 'prepare'; no automatic post-install hook is present

permission_hygienecritical SD-004 benign_example
scripts/tests/test_correction_service.py

The path reference occurs in a unit test expecting a validation error, not in code that reads or exploits credentials.