Scanned skills

google/skills application-integration-authoring

Checked the catalogued skill at application-integration-authoring.

SkillTrust corpus scan 8 November 2026 v0.13.0 via skillsh Verify on GitHub
D AI-triaged 43
D Security

D; retained sample includes a high finding · SD-022 · what this rule accepts as a false positive →

D Permissions

D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →

B Transparency

B set by findings not listed in the stored summary

showing 10 of 43
securityhigh SD-022
SKILL.md
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
SKILL.md
18 suppressed by AI triage
permission_hygienehigh SD-003 benign_example
SKILL.md

Path traversal examples in documentation; not actual file access.

transparencymedium SD-007 benign_example
SKILL.md

Documentation contains a note about outbound network calls, not actual code or configuration that would execute them.

securityhigh SD-007 benign_example
SKILL.md

Only a textual reference in documentation, no executable code or configuration enabling outbound network calls.

permission_hygienehigh SD-003 benign_example
SKILL.md

The content is documentation; no actual path traversal is present.

securityhigh SD-022 benign_example
SKILL.md

The matched text is a placeholder comment, not actual DNS queries.

permission_hygienehigh SD-003 benign_example
SKILL.md

No path traversal string present; context shows empty lines only, indicating a false positive.

permission_hygienehigh SD-003 benign_example
SKILL.md

The matched text is a placeholder comment, no real path traversal.

permission_hygienehigh SD-003 benign_example
SKILL.md

Duplicate placeholder, no real path traversal.

securityhigh SD-007 benign_example
references/attribution.md

The curl command appears only as a documentation example and is not executed automatically, so it does not constitute an active outbound network call.

permission_hygienehigh SD-003 benign_example
references/cicd-promotion.md

The flagged path traversal appears to be a documentation example, not an active vulnerability.

securityhigh SD-007 benign_example
references/cicd-promotion.md

Documentation contains a note about outbound network calls, not actual code or configuration that would execute them.

permission_hygienehigh SD-003 benign_example
references/integration-version-json.md

The file is documentation prose with no executable code or path traversal constructs present, so the flag is likely a false positive.

securityhigh SD-022 benign_example
references/rest-api-cheatsheet.md

The matched text is part of documentation describing a detection, not an active exfiltration script.

securityhigh SD-022 benign_example
references/rest-api-cheatsheet.md

No actual DNS query patterns present; empty context indicates placeholder.

permission_hygienehigh SD-003 benign_example
references/rest-api-cheatsheet.md

Documentation file contains illustrative text, not executable code, so path traversal references are benign examples.

permission_hygienehigh SD-003 benign_example
references/rest-api-cheatsheet.md

Context shows only empty lines; no path traversal.

permission_hygienehigh SD-003 benign_example
references/rest-api-cheatsheet.md

Empty context; no traversal.

permission_hygienehigh SD-003 benign_example
references/rest-api-cheatsheet.md

Empty context; no traversal.