Scanned skills

mattpocock/skills

Checked supported skill files and coding-agent configuration in this repository.

D 10
D Security

D set by 6 high findings · SD-007 · what this rule accepts as a false positive →

D Permissions

D set by 4 high findings · SD-003 · what this rule accepts as a false positive →

A Transparency

A set by no findings on this axis

10 findings
permission_hygienehigh SD-003
.agents/adr/0002-ship-as-a-claude-code-plugin.md:32

Possible directory traversal to access files outside skill scope, but may be legitimate relative path or resource reference. No corroborating signals found.

permission_hygienehigh SD-003
.agents/invocation.md:16

Possible directory traversal to access files outside skill scope, but may be legitimate relative path or resource reference. No corroborating signals found.

securityhigh SD-007
skills/engineering/diagnosing-bugs/scripts/hitl-loop.template.sh:34

Possible data exfiltration to external service, but may be legitimate API call. No corroborating signals found.

securityhigh SD-007
skills/engineering/tdd/mocking.md:44

Possible data exfiltration to external service, but may be legitimate API call. No corroborating signals found.

securityhigh SD-007
skills/engineering/tdd/mocking.md:45

Possible data exfiltration to external service, but may be legitimate API call. No corroborating signals found.

securityhigh SD-007
skills/engineering/tdd/mocking.md:46

Possible data exfiltration to external service, but may be legitimate API call. No corroborating signals found.

securityhigh SD-007
skills/engineering/tdd/mocking.md:51

Possible data exfiltration to external service, but may be legitimate API call. No corroborating signals found.

securityhigh SD-007
skills/engineering/wizard/template.sh:194

Possible data exfiltration to external service, but may be legitimate API call. No corroborating signals found.

permission_hygienehigh SD-003
skills/in-progress/setup-ts-deep-modules/SKILL.md:73

Possible directory traversal to access files outside skill scope, but may be legitimate relative path or resource reference. No corroborating signals found.

permission_hygienehigh SD-003
skills/in-progress/setup-ts-deep-modules/SKILL.md:84

Possible directory traversal to access files outside skill scope, but may be legitimate relative path or resource reference. No corroborating signals found.

Embed the badge

The badge grades cover supported skill and coding-agent configuration files in this repository. It is not a security audit of the whole repository.

It reports repository state and is not proof that the person who published the scan owns the repository.

SkillTrust agent config badge preview
[![SkillTrust agent config grade](https://skilltrust.app/badge/mattpocock/skills/pill.svg)](https://skilltrust.app/r/mattpocock/skills)
[![SkillTrust agent config grade](https://skilltrust.app/badge/mattpocock/skills/card.svg)](https://skilltrust.app/r/mattpocock/skills)
<a href="https://skilltrust.app/r/mattpocock/skills"><img src="https://skilltrust.app/badge/mattpocock/skills/card.svg" width="360" alt="SkillTrust agent config grades"></a>