Scanned skills

forcedotcom/sf-skills omnistudio-epc-catalog-generate

Checked the catalogued skill at omnistudio-epc-catalog-generate.

SkillTrust corpus scan 7 November 2026 v0.13.0 via skillsh Verify on GitHub
C AI-triaged 25
C Security

C; retained sample includes a medium finding · SD-008 · what this rule accepts as a false positive →

A Permissions

A set by no findings on this axis

B Transparency

B; retained sample includes a medium finding · SD-007 · what this rule accepts as a false positive →

showing 10 of 25
securitymedium SD-008
SKILL.md
transparencymedium SD-007
assets/examples/business-internet-premium-fttc-simple-offer/Business-Internet-Premium-FTTC_DataPack.json
transparencymedium SD-007
assets/examples/business-internet-premium-fttc-simple-offer/Business-Internet-Premium-FTTC_DataPack.json
transparencymedium SD-007
assets/examples/business-internet-premium-fttc-simple-offer/Business-Internet-Premium-FTTC_DataPack.json
transparencymedium SD-007
assets/examples/business-internet-premium-fttc-simple-offer/Business-Internet-Premium-FTTC_DataPack.json
transparencymedium SD-007
assets/examples/business-internet-pro-vpl-simple-offer/Business-Internet-Pro-VPL_DataPack.json
transparencymedium SD-007
assets/examples/business-internet-pro-vpl-simple-offer/Business-Internet-Pro-VPL_DataPack.json
transparencymedium SD-007
assets/examples/business-internet-pro-vpl-simple-offer/Business-Internet-Pro-VPL_DataPack.json
transparencymedium SD-007
assets/examples/business-internet-pro-vpl-simple-offer/Business-Internet-Pro-VPL_DataPack.json
transparencymedium SD-007
assets/examples/samsung-galaxy-s22-bundle/Samsung-Galaxy-S22-Bundle_DataPack.json
5 suppressed by AI triage
permission_hygienehigh SD-003 benign_example
README.md

The reference to a relative path in documentation does not pose a security risk

securitymedium SD-008 benign_example
assets/examples/business-internet-premium-fttc-simple-offer/Business-Internet-Premium-FTTC_ParentKeys.json

The string is a hexadecimal ID, not a base64-encoded payload, so no obfuscation is present.

securitymedium SD-008 benign_example
assets/examples/business-internet-pro-vpl-simple-offer/Business-Internet-Pro-VPL_ParentKeys.json

The line contains normal identifiers, not a base64-encoded string.

securitymedium SD-008 benign_example
assets/examples/static-ip-simple-offer/Static-IP_ParentKeys.json

The string contains typical object identifiers, not an encoded payload.

securitymedium SD-008 benign_example
examples/business-internet-plus-bundle/Business-Internet-Plus_ParentKeys.json

The detected string appears to be a hexadecimal hash or ID, not a Base64-encoded payload, indicating a false positive.