Scanned skills

google/skills google-cloud-solution-multi-agent-security

Checked the catalogued skill at google-cloud-solution-multi-agent-security.

SkillTrust corpus scan 8 November 2026 v0.13.0 via skillsh Verify on GitHub
D AI-triaged 13
D Security

D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →

A Permissions

A set by no findings on this axis

B Transparency

B; retained sample includes a medium finding · SD-007 · what this rule accepts as a false positive →

showing 10 of 13
securityhigh SD-007
SKILL.md
securityhigh SD-007
SKILL.md
transparencymedium SD-007
assets/agw-authz-extension.yaml
securityhigh SD-007
scripts/hybrid_vpn_agent.py
securityhigh SD-007
scripts/register_cloud_run_services.sh
securityhigh SD-007
scripts/register_cloud_run_services.sh
securityhigh SD-007
scripts/register_cloud_run_services.sh
securityhigh SD-007
scripts/validate_ingress_unauth.sh
securityhigh SD-007
scripts/validate_ingress_unauth.sh
securityhigh SD-007
scripts/verify_egress_policies.py
4 suppressed by AI triage
securityhigh SD-007 benign_example
SKILL.md

The file only contains documentation text about a detected outbound network call, with no actual code or permission grant present.

securityhigh SD-007 benign_example
SKILL.md

The line contains documentation text, not executable code or configuration that would perform outbound network calls.

securityhigh SD-007 benign_example
scripts/enforce_sgp_patch.sh

The script performs a legitimate API call to Google Cloud to enforce SGP, not exfiltration.

securityhigh SD-007 benign_example
scripts/enforce_sgp_patch.sh

The curl command is part of a normal configuration script, not a malicious outbound call.