Scanned skills

github/awesome-copilot code-tour

Checked the catalogued skill at code-tour.

SkillTrust corpus scan 22 September 2026 v0.10.0 via skillsh Verify on GitHub
D AI-triaged 3
GitHub
A Security

A set by no findings on this axis

D Permissions

D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →

B Transparency

B; retained sample includes a medium finding · SD-007 · what this rule accepts as a false positive →

3 findings
permission_hygienehigh SD-003
SKILL.md
transparencymedium SD-007
references/codetour-schema.json
transparencymedium SD-007
references/codetour-schema.json
2 suppressed by AI triage
securityhigh SD-007 benign_example
scripts/generate_from_docs.py

The string is a static JSON schema reference, not an active outbound network call

securityhigh SD-007 benign_example
scripts/validate_tour.py

The code merely validates that a URI starts with https://; it does not perform any outbound network call.