Scanned skills

forcedotcom/sf-skills agentforce-d360-analyze

Checked the catalogued skill at agentforce-d360-analyze.

SkillTrust corpus scan 7 November 2026 v0.13.0 via skillsh Verify on GitHub
F AI-triaged 48
GitHub
D Security

D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →

F Permissions

F; retained sample includes a critical finding · SD-004 · what this rule accepts as a false positive →

A Transparency

A set by no findings on this axis

showing 10 of 48
permission_hygienehigh SD-003
scripts/assemble_dc.py
permission_hygienecritical SD-004
scripts/assemble_dc.py
securityhigh SD-007
scripts/dc.py
securityhigh SD-007
scripts/dc.py
securityhigh SD-007
scripts/dc.py
permission_hygienehigh SD-003
scripts/discover_sessions.py
permission_hygienehigh SD-003
scripts/discover_sessions.py
permission_hygienehigh SD-003
scripts/discover_sessions.py
permission_hygienehigh SD-003
scripts/storage.py
securityhigh SD-007
scripts/tests/fixtures/synthetic_session.py
2 suppressed by AI triage
securityhigh SD-022 benign_example
SKILL.md

The file contains only documentation of command options, not actual code performing DNS tunneling.

permission_hygienehigh SD-003 benign_example
scripts/_shared/paths.py

Code explicitly uses anchored fullmatch for session_id, preventing traversal suffixes; the flagged pattern is not exploitable.