Scanned skills
decathlon/tzatziki add-cucumber-tests
Checked the catalogued skill at add-cucumber-tests.
F AI-triaged 8
C Security
C; retained sample includes a medium finding · SD-008 · what this rule accepts as a false positive →
F Permissions
F; retained sample includes a critical finding · SD-006 · what this rule accepts as a false positive →
A Transparency
A set by no findings on this axis
8 findings
references/steps-http.md
references/steps-http.md
references/steps-http.md
references/steps-jackson3.md
references/steps-mcp.md
references/steps-mcp.md
references/steps-spring-mongodb.md
repomix/generate-skill-references.sh
3 suppressed by AI triage
references/steps-core.md
The path traversal is only in a documentation example, not actual code that could be executed.
references/steps-core.md
The example demonstrates a scenario in documentation, not executable path traversal.
references/steps-spring-kafka.md
The content shows a file path and Java imports, not a suspicious base64-encoded payload.