Scanned skills

juliusbrussee/caveman caveman-compress

Checked the catalogued skill at caveman-compress.

SkillTrust corpus scan 8 November 2026 v0.13.0 via skillsh Verify on GitHub
F AI-triaged 6
GitHub
D Security

D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →

F Permissions

F; retained sample includes a critical finding · SD-004 · what this rule accepts as a false positive →

A Transparency

A set by no findings on this axis

6 findings
permission_hygienehigh SD-003
README.md
securityhigh SD-007
scripts/compress.py
permission_hygienecritical SD-004
scripts/compress.py
securityhigh SD-007
scripts/compress.py
securityhigh SD-007
scripts/compress.py
securityhigh SD-007
scripts/compress.py
3 suppressed by AI triage
permission_hygienehigh SD-003 benign_example
README.md

Path traversal examples in documentation; not actual file access.

permission_hygienehigh SD-003 benign_example
SECURITY.md

SECURITY.md is a documentation file; the flagged path traversal likely refers to placeholder or comment text, which cannot actually cause file access

securityhigh SD-022 benign_example
SKILL.md

The text describes legitimate API communication for model inference, not DNS tunneling.