Scanned skills

google/skills application-integration-basics

Checked the catalogued skill at application-integration-basics.

SkillTrust corpus scan 8 November 2026 v0.13.0 via skillsh Verify on GitHub
D AI-triaged 5
D Security

D; retained sample includes a high finding · SD-022 · what this rule accepts as a false positive →

A Permissions

A set by no findings on this axis

A Transparency

A set by no findings on this axis

5 findings
securityhigh SD-022
references/api-access.md
securityhigh SD-022
references/api-access.md
securityhigh SD-007
references/api-access.md
securityhigh SD-007
references/api-access.md
securityhigh SD-007
references/api-access.md
13 suppressed by AI triage
securityhigh SD-022 benign_example
SKILL.md

No DNS queries are present; the text merely documents API usage and credential handling.

permission_hygienehigh SD-003 benign_example
SKILL.md

The line contains a comment about testing, not a path traversal operation.

securityhigh SD-007 benign_example
SKILL.md

The curl command is a documented example of a legitimate API call, not an actual execution of malicious outbound traffic.

securityhigh SD-007 benign_example
SKILL.md

The curl command is a documentation example for a normal API list operation, not a malicious network action.

securityhigh SD-022 benign_example
references/api-access.md

The file is documentation, with no DNS exfiltration logic or data encoding.

permission_hygienehigh SD-003 benign_example
references/api-access.md

The file is documentation only and contains no actual file path traversal code.

permission_hygienehigh SD-003 benign_example
references/api-access.md

The file contains only documentation, with no real traversal paths or executable code.

securityhigh SD-007 benign_example
references/attribution.md

The outbound curl command is a sample in documentation, not an executed or active configuration.

permission_hygienehigh SD-003 benign_example
references/core-concepts.md

The documentation references API paths but contains no actual '../' or absolute path traversal, indicating a false positive.

permission_hygienehigh SD-003 benign_example
references/core-concepts.md

Similar to finding 1, the text only describes API endpoints and contains no real path traversal patterns.

permission_hygienehigh SD-003 benign_example
references/iam-and-service-accounts.md

The content is documentation describing role permissions, not an actual path traversal exploit.

securityhigh SD-007 benign_example
references/provisioning-and-terraform.md

Documentation contains a sample curl command, not executed code.

securityhigh SD-007 benign_example
references/provisioning-and-terraform.md

Documentation contains a sample curl command, not executed code.