Scanned skills
jimliu/baoyu-design claude-design
Checked the catalogued skill at claude-design.
F AI-triaged 477
D Security
D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →
F Permissions
F set by findings not listed
A Transparency
A set by no findings on this axis
showing 10 of 477
artifact-type/reference/google-fonts-notices.json
scripts/artifact.mjs
scripts/artifact.mjs
scripts/artifact.mjs
scripts/artifact.mjs
scripts/artifact.mjs
scripts/artifact.mjs
scripts/artifact.mjs
scripts/artifact.mjs
scripts/artifact.mjs
4 suppressed by AI triage
SKILL.md
The content describes how assets should be uploaded and referenced via URLs; it does not contain any active outbound network call or permission grant.
SKILL.md
The skill intentionally writes a pre‑commit hook to run an integrity check, not malicious code.
artifact-type/reference/design-system-components.md
The text merely describes how artifact URLs are formed in documentation, not executable code.
artifact-type/reference/design-system-components.md
The path traversal pattern appears only in illustrative example paths within documentation, not as real file access.