Scanned skills

google/skills google-cloud-filestore-nfs-browser

Checked the catalogued skill at google-cloud-filestore-nfs-browser.

SkillTrust corpus scan 8 November 2026 v0.13.0 via skillsh Verify on GitHub
D AI-triaged 1
A Security

A set by no findings on this axis

D Permissions

D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →

A Transparency

A set by no findings on this axis

1 finding
permission_hygienehigh SD-003
SKILL.md
11 suppressed by AI triage
permission_hygienehigh SD-003 benign_example
SKILL.md

Text describes error messages containing ../, not actual code execution.

securityhigh SD-022 benign_example
SKILL.md

Reference to script list, no DNS lookup or tunneling indicated.

permission_hygienehigh SD-003 benign_example
references/iap-jump-host.md

Reference to /etc/fstab is part of instructional documentation, not executable code.

permission_hygienehigh SD-003 benign_example
references/iap-jump-host.md

Reference to /etc/fstab is part of instructional documentation, not executable code.

securitymedium SD-008 benign_example
scripts/jump_host_engine.py

The base64 encoding is used to safely transmit and execute a script over SSH, a common legitimate practice.

securityhigh SD-007 benign_example
scripts/nfs_browser.py

Importing urllib.request is a normal part of client functionality, not a malicious outbound call.

securityhigh SD-007 benign_example
scripts/nfs_browser.py

Construction of a urllib.request.Request is preparatory for legitimate communication with the bridge service.

securityhigh SD-007 benign_example
scripts/nfs_browser.py

The urllib.request.urlopen call is used to communicate with a trusted bridge endpoint as part of normal tool operation.

securityhigh SD-007 benign_example
scripts/nfs_browser_test.py

The URL is used only in a unit test, not in production code.

securityhigh SD-007 benign_example
scripts/nfs_browser_test.py

The URL reference appears only in a test context, not in live code.

securityhigh SD-007 benign_example
scripts/nfs_browser_test.py

The bridge URL is passed as a command‑line argument in a test, not executed in production.