Scanned skills

msw-git/msw-ai-coding-plugins-official msw-ui-system

Checked the catalogued skill at msw-ui-system.

SkillTrust corpus scan 7 October 2026 v0.13.0 via skillsh Verify on GitHub
D AI-triaged 14
GitHub
C Security

C; retained sample includes a medium finding · SD-008 · what this rule accepts as a false positive →

D Permissions

D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →

A Transparency

A set by no findings on this axis

showing 10 of 14
securitymedium SD-008
SKILL.md
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
references/component-api.md
permission_hygienehigh SD-003
references/layout-recipes.md
permission_hygienehigh SD-003
references/layout-recipes.md
4 suppressed by AI triage
securitymedium SD-008 benign_example
references/component-api.md

The file is documentation; the Base64 reference is explanatory, not executable code.

permission_hygienehigh SD-003 benign_example
references/component-api.md

Path traversal strings appear in prose documentation, not as actionable code.

permission_hygienehigh SD-003 benign_example
references/component-api.md

Same reasoning as finding 2; no code that could exploit path traversal.

permission_hygienehigh SD-003 benign_example
references/runtime-patterns.md

The snippet contains no actual path traversal or absolute system path usage, only descriptive comments about runtime patterns.