Scanned skills
jeffallan/claude-skills secure-code-guardian
Checked the catalogued skill at secure-code-guardian.
A AI-triaged 0
A Security
A set by no findings on this axis
A Permissions
A set by no findings on this axis
A Transparency
A set by no findings on this axis
0 findings
No issues flagged by the static checks in the scanned files.
2 suppressed by AI triage
SKILL.md
The "curl -I" usage is a documentation example, not an actual outbound network call or a permissive configuration.
references/xss-csrf.md
fetch is to the internal endpoint '/api/action', not an external host, so it does not pose an outbound network call risk