Scanned skills

grafana/skills app-sdk-concepts

Checked the catalogued skill at app-sdk-concepts.

SkillTrust corpus scan 28 October 2026 v0.13.0 via skillsh Verify on GitHub
D AI-triaged 4
GitHub
D Security

D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →

D Permissions

D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →

A Transparency

A set by no findings on this axis

4 findings
permission_hygienehigh SD-003
references/local-config.md
permission_hygienehigh SD-003
references/local-config.md
securityhigh SD-007
references/local-development.md
securityhigh SD-007
references/local-development.md
3 suppressed by AI triage
permission_hygienehigh SD-003 benign_example
references/local-config.md

The file contains only blank lines; no actual path traversal or absolute path is present.

permission_hygienehigh SD-003 benign_example
references/local-config.md

Path traversal examples in documentation; not actual file access.

securityhigh SD-022 benign_example
references/local-development.md

This is a documentation placeholder, not an active DNS exfiltration implementation.