Scanned skills

everyinc/compound-engineering-plugin ce-sweep

Checked the catalogued skill at ce-sweep.

SkillTrust corpus scan 8 November 2026 v0.13.0 via skillsh Verify on GitHub
D AI-triaged 3
D Security

D; retained sample includes a high finding · SD-022 · what this rule accepts as a false positive →

A Permissions

A set by no findings on this axis

A Transparency

A set by no findings on this axis

3 findings
securityhigh SD-022
references/run.md
securityhigh SD-007
scripts/analyze_riffrec_zip.py
securityhigh SD-007
scripts/analyze_riffrec_zip.py
3 suppressed by AI triage
securityhigh SD-022 benign_example
SKILL.md

No evidence of a real DNS lookup or encoded data, only a documentation comment.

permission_hygienehigh SD-003 benign_example
references/interview.md

Script demonstrates a safe use of a temporary scratch directory, not a malicious path traversal.

permission_hygienehigh SD-003 benign_example
references/run.md

The document shows a harmless bash snippet that creates a temporary directory, not an exploitation of path traversal.