github/awesome-copilot python-pypi-package-builder

Checked the catalogued skill at python-pypi-package-builder.

SkillTrust corpus scan 7 November 2026 v0.13.0 via skillsh Verify on GitHub

D AI-triaged 19

D Security

D; retained sample includes a high finding · SD-011 · what this rule accepts as a false positive →

A Permissions

A set by no findings on this axis

A Transparency

A set by no findings on this axis

showing 10 of 19

securityhigh SD-011

references/versioning-strategy.md

securityhigh SD-007

scripts/scaffold.py

securityhigh SD-007

scripts/scaffold.py

securityhigh SD-007

scripts/scaffold.py

securityhigh SD-007

scripts/scaffold.py

securityhigh SD-007

scripts/scaffold.py

securityhigh SD-007

scripts/scaffold.py

securityhigh SD-007

scripts/scaffold.py

securityhigh SD-007

scripts/scaffold.py

securityhigh SD-007

scripts/scaffold.py

2 suppressed by AI triage

securityhigh SD-011 benign_example

SKILL.md

The line only references a test PyPI index, not an untrusted package source or known vulnerable dependency.

securityhigh SD-011 benign_example

references/ci-publishing.md

Standard pip install from test.pypi.org, not a vulnerable dependency