github/awesome-copilot python-pypi-package-builder

Checked the catalogued skill at python-pypi-package-builder.

SkillTrust corpus scan 22 September 2026 v0.10.0 via skillsh Verify on GitHub

D AI-triaged 19

D Security

D; retained sample includes a high finding · SD-011 · what this rule accepts as a false positive →

A Permissions

A set by no findings on this axis

A Transparency

A set by no findings on this axis

showing 10 of 19

securityhigh SD-011

SKILL.md

securityhigh SD-007

scripts/scaffold.py

securityhigh SD-007

scripts/scaffold.py

securityhigh SD-007

scripts/scaffold.py

securityhigh SD-007

scripts/scaffold.py

securityhigh SD-007

scripts/scaffold.py

securityhigh SD-007

scripts/scaffold.py

securityhigh SD-007

scripts/scaffold.py

securityhigh SD-007

scripts/scaffold.py

securityhigh SD-007

scripts/scaffold.py

2 suppressed by AI triage

securityhigh SD-011 benign_example

references/ci-publishing.md

Standard TestPyPI install command in publishing documentation, not malicious code

securityhigh SD-011 benign_example

references/versioning-strategy.md

Documentation example showing pip install from test.pypi.org; not a real threat.