Scanned skills

mvanhorn/cli-printing-press printing-press

Checked the catalogued skill at printing-press.

SkillTrust corpus scan 8 November 2026 v0.13.0 via skillsh Verify on GitHub
F AI-triaged 62
F Security

F; retained sample includes a critical finding · SD-009 · what this rule accepts as a false positive →

D Permissions

D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →

B Transparency

B set by findings not listed in the stored summary

showing 10 of 62
permission_hygienehigh SD-003
phases/01-preflight.md
securityhigh SD-007
phases/01-preflight.md
securitycritical SD-009
phases/01-preflight.md
securityhigh SD-011
phases/01-preflight.md
permission_hygienehigh SD-003
phases/01-preflight.md
securityhigh SD-007
phases/01-preflight.md
securityhigh SD-007
phases/01-preflight.md
securityhigh SD-007
phases/01-preflight.md
securityhigh SD-007
phases/06-browser-sniff-gate.md
securityhigh SD-007
phases/06-browser-sniff-gate.md
7 suppressed by AI triage
securitycritical SD-001 benign_example
phases/02-run-initialization.md

The command is within a comment and is not executed

securityhigh SD-007 benign_example
phases/08-ecosystem-absorb-gate.md

The text describes how to look for HTTP client calls in source code, not an actual outbound call being executed.

permission_hygienehigh SD-003 benign_example
phases/09-api-reachability-gate.md

The file is documentation, containing no executable code that performs path traversal.

securityhigh SD-022 benign_example
phases/09-api-reachability-gate.md

The file is documentation, with no DNS exfiltration logic or data encoding.

securityhigh SD-007 benign_example
phases/09-api-reachability-gate.md

File is prose; outbound call patterns are mentioned as examples, not real network calls.

securityhigh SD-007 benign_example
references/known-specs.md

The text merely documents that curl was used for validation, not an actual outbound call in this file

securitycritical SD-001 benign_example
references/novel-features-subagent.md

Documentation refers to a variable placeholder; no shell command execution or backticks are present.