Scanned skills

jaganpro/sf-skills sf-diagram-nanobananapro

Checked the catalogued skill at sf-diagram-nanobananapro.

SkillTrust corpus scan 14 September 2026 v0.10.0 via skillsh Verify on GitHub
F AI-triaged 15
F Security

F; retained sample includes a critical finding · SD-013 · what this rule accepts as a false positive →

D Permissions

D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →

A Transparency

A set by no findings on this axis

showing 10 of 15
securitycritical SD-013
README.md
securitycritical SD-013
README.md
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
SKILL.md
1 suppressed by AI triage
securitycritical SD-013 benign_example
references/gemini-cli-setup.md

Adding environment variables to ~/.zshrc is a normal user configuration and not a malicious persistence mechanism.