Scanned skills
everyinc/compound-engineering-plugin ce-prototype
Checked the catalogued skill at ce-prototype.
D AI-triaged 10
D Security
D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →
D Permissions
D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →
A Transparency
A set by no findings on this axis
10 findings
references/preview.md
scripts/light-webserver.js
scripts/light-webserver.js
scripts/light-webserver.js
scripts/light-webserver.js
scripts/light-webserver.js
scripts/light-webserver.js
scripts/light-webserver.js
scripts/light-webserver.js
scripts/light-webserver.js
3 suppressed by AI triage
assets/annotate.js
This fetch call is part of normal agent data submission to a server, not malicious.
assets/annotate.js
This fetch call is part of normal agent session flush/end to a server, not malicious.
references/annotation-loop.md
The text is a comment advising against curl loops, containing no actual outbound network call.