Scanned skills

jackwener/opencli opencli-adapter-author

Checked the catalogued skill at opencli-adapter-author.

SkillTrust corpus scan 8 November 2026 v0.13.0 via skillsh Verify on GitHub
D AI-triaged 24
D Security

D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →

D Permissions

D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →

B Transparency

B; retained sample includes a medium finding · SD-007 · what this rule accepts as a false positive →

showing 10 of 24
permission_hygienehigh SD-003
references/adapter-template.md
securityhigh SD-007
references/adapter-template.md
securityhigh SD-007
references/adapter-template.md
permission_hygienehigh SD-003
references/adapter-template.md
securityhigh SD-007
references/adapter-template.md
securityhigh SD-007
references/adapter-template.md
securityhigh SD-007
references/api-discovery.md
transparencymedium SD-007
references/api-discovery.md
permission_hygienehigh SD-003
references/api-discovery.md
securityhigh SD-007
references/api-discovery.md
16 suppressed by AI triage
securityhigh SD-007 benign_example
SKILL.md

The file is a documentation text with no executable code or config that would enable outbound network calls.

securityhigh SD-007 benign_example
references/adapter-template.md

The file is documentation and contains only a comment about detecting outbound calls, not actual code or configuration that performs a network call.

securitycritical SD-001 benign_example
references/api-discovery.md

The matched content is a placeholder comment in documentation, not executable code.

securityhigh SD-007 benign_example
references/api-discovery.md

Documentation file contains example code demonstrating outbound network calls, not an actual malicious implementation.

securityhigh SD-022 benign_example
references/api-discovery.md

The file is documentation, and the matched text appears to be a placeholder note rather than actual DNS exfiltration code.

transparencymedium SD-007 benign_example
references/api-discovery.md

The file is a markdown documentation, containing only placeholder text with no executable code or configuration that initiates outbound calls.

securitycritical SD-001 benign_example
references/api-discovery.md

The matched content is a placeholder comment in documentation, not executable code.

securityhigh SD-007 benign_example
references/field-decode-playbook.md

Documentation contains a note about outbound network calls, not actual code or configuration that would execute them.

permission_hygienehigh SD-003 benign_example
references/jsdom-fixture-pattern.md

The path /tmp/raw-<command>.html is a benign example in documentation, not an actual file write by malicious code.

permission_hygienehigh SD-003 benign_example
references/jsdom-fixture-pattern.md

The path reference is in a non-executable doc file and cannot be used for actual traversal.

securityhigh SD-007 benign_example
references/site-memory/xueqiu.md

The content is a documentation excerpt describing a normal fetch call to a legitimate API endpoint, not malicious activity.

securityhigh SD-007 benign_example
references/site-recon.md

The text is a documentation example describing a curl command, not an actual outbound call in the code.

securityhigh SD-007 benign_example
references/site-recon.md

The passage explains a fetch-based network pattern in documentation, not an executed network call.

securityhigh SD-007 benign_example
references/success-rate-pitfalls.md

The text describes defensive strategies and reference to fetch usage, not an actual outbound network call in executable code.

permission_hygienehigh SD-003 benign_example
references/typed-errors.md

The file is a documentation snippet and contains no executable code that performs path traversal

permission_hygienehigh SD-003 benign_example
references/typed-errors.md

The file is documentation with no actual path traversal string present, indicating a false positive.