Scanned skills

forcedotcom/sf-skills automation-sandbox-post-copy-configure

Checked the catalogued skill at automation-sandbox-post-copy-configure.

SkillTrust corpus scan 3 October 2026 v0.13.0 via skillsh Verify on GitHub
D AI-triaged 18
A Security

A set by no findings on this axis

D Permissions

D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →

B Transparency

B; retained sample includes a medium finding · SD-007 · what this rule accepts as a false positive →

showing 10 of 18
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
SKILL.md
transparencymedium SD-007
examples/sample_config_input.json
transparencymedium SD-007
examples/sample_config_input.json
transparencymedium SD-007
examples/sample_config_input.json
5 suppressed by AI triage
permission_hygienehigh SD-003 benign_example
references/api_endpoints.md

Documentation example writes to /tmp, which is a normal system directory, not malicious.

permission_hygienehigh SD-003 benign_example
references/api_endpoints.md

Example script shows writing to /tmp; not a real path traversal attack.

permission_hygienehigh SD-003 benign_example
references/api_endpoints.md

The script snippet demonstrates safe usage of /tmp for temporary files.

permission_hygienehigh SD-003 benign_example
references/api_endpoints.md

The documentation contains benign example of temporary file creation in /tmp.

securitymedium SD-008 benign_example
references/api_endpoints.md

Base64 string appears as part of a documentation example, not actual obfuscation.