Scanned skills

jimliu/baoyu-design claude-design

Checked the catalogued skill at claude-design.

SkillTrust corpus scan 7 November 2026 v0.13.0 via skillsh Verify on GitHub
F AI-triaged 477
D Security

D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →

F Permissions

F set by findings not listed

A Transparency

A set by no findings on this axis

showing 10 of 477
securitymedium SD-008
artifact-type/reference/google-fonts-notices.json
securityhigh SD-007
scripts/artifact.mjs
securityhigh SD-007
scripts/artifact.mjs
securityhigh SD-007
scripts/artifact.mjs
securityhigh SD-022
scripts/artifact.mjs
securityhigh SD-007
scripts/artifact.mjs
securityhigh SD-007
scripts/artifact.mjs
securityhigh SD-007
scripts/artifact.mjs
securityhigh SD-007
scripts/artifact.mjs
securityhigh SD-007
scripts/artifact.mjs
4 suppressed by AI triage
securityhigh SD-007 benign_example
SKILL.md

The content describes how assets should be uploaded and referenced via URLs; it does not contain any active outbound network call or permission grant.

securityhigh SD-014 benign_example
SKILL.md

The skill intentionally writes a pre‑commit hook to run an integrity check, not malicious code.

securityhigh SD-022 benign_example
artifact-type/reference/design-system-components.md

The text merely describes how artifact URLs are formed in documentation, not executable code.

permission_hygienehigh SD-003 benign_example
artifact-type/reference/design-system-components.md

The path traversal pattern appears only in illustrative example paths within documentation, not as real file access.