Scanned skills

daymade/claude-code-skills tunnel-doctor

Checked the catalogued skill at tunnel-doctor.

SkillTrust corpus scan 8 November 2026 v0.13.0 via skillsh Verify on GitHub
F AI-triaged 149
F Security

F; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →

F Permissions

F set by findings not listed

B Transparency

B; retained sample includes a medium finding · SD-007 · what this rule accepts as a false positive →

showing 10 of 149
securityhigh SD-007
SKILL.md
securityhigh SD-007
SKILL.md
securityhigh SD-022
SKILL.md
securityhigh SD-007
SKILL.md
transparencymedium SD-007
SKILL.md
securityhigh SD-007
SKILL.md
securityhigh SD-022
SKILL.md
securityhigh SD-007
SKILL.md
securityhigh SD-007
SKILL.md
securityhigh SD-022
SKILL.md
4 suppressed by AI triage
securityhigh SD-007 benign_example
references/proxy_conflict_reference.md

Documentation file contains example code demonstrating outbound network calls, not an actual malicious implementation.

securitymedium SD-008 benign_example
references/windows_host_tun_wsl_cascade.md

Base64 mention in docs; benign context.

securityhigh SD-022 benign_example
references/windows_host_tun_wsl_cascade.md

The file is a documentation page, and the flagged line appears to be a placeholder or explanatory text rather than evidence of actual DNS exfiltration.

securityhigh SD-007 benign_example
tests/test_quick_diagnose.py

File is prose; outbound call patterns are mentioned as examples, not real network calls.