Scanned skills

huggingface/skills transformers-js

Checked the catalogued skill at transformers-js.

SkillTrust corpus scan 30 October 2026 v0.13.0 via skillsh Verify on GitHub
D AI-triaged 1
D Security

D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →

A Permissions

A set by no findings on this axis

A Transparency

A set by no findings on this axis

1 finding
securityhigh SD-007
SKILL.md
3 suppressed by AI triage
permission_hygienehigh SD-003 benign_example
references/CACHE.md

Documentation sets cache directory; no active code vulnerable.

permission_hygienehigh SD-003 benign_example
references/CACHE.md

Comment shows expected cache path; safe documentation.

securityhigh SD-007 benign_example
references/CONFIGURATION.md

Documented library code for setting auth header, not malicious outbound call.