Scanned skills

higgsfield-ai/skills higgsfield-websites

Checked the catalogued skill at higgsfield-websites.

SkillTrust corpus scan 5 November 2026 v0.13.0 via skillsh Verify on GitHub
F AI-triaged 52
F Security

F; retained sample includes a critical finding · SD-009 · what this rule accepts as a false positive →

D Permissions

D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →

B Transparency

B set by findings not listed in the stored summary

showing 10 of 52
securityhigh SD-007
SKILL.md
securitycritical SD-009
SKILL.md
securityhigh SD-011
SKILL.md
permission_hygienehigh SD-003
references/app-cover.md
securityhigh SD-007
references/app-cover.md
securityhigh SD-007
references/app-cover.md
securityhigh SD-007
references/app-cover.md
securityhigh SD-007
references/app-quickstart.md
securityhigh SD-007
references/app-quickstart.md
securityhigh SD-007
references/auth.md
5 suppressed by AI triage
permission_hygienehigh SD-003 benign_example
references/app-flow.md

The referenced documentation contains no actual path traversal or code that would execute file system access; the scanner likely flagged an empty placeholder or example text.

permission_hygienehigh SD-003 benign_example
references/app-quickstart.md

Documentation example, no real path traversal code.

securityhigh SD-007 benign_example
references/auth.md

The file is a documentation text with no executable code or config that would enable outbound network calls.

securityhigh SD-022 benign_example
references/design-taste-frontend.md

The file is a documentation markdown; the phrase is a comment about detection, not actual exfiltration activity.

securityhigh SD-022 benign_example
references/seo.md

The matched text is a placeholder comment in a manifest file, not executable code performing DNS exfiltration.