Scanned skills

mvanhorn/cli-printing-press printing-press-retro

Checked the catalogued skill at printing-press-retro.

SkillTrust corpus scan 8 November 2026 v0.13.0 via skillsh Verify on GitHub
F AI-triaged 9
F Security

F; retained sample includes a critical finding · SD-001 · what this rule accepts as a false positive →

D Permissions

D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →

A Transparency

A set by no findings on this axis

9 findings
permission_hygienehigh SD-003
phases/06-write-the-retro.md
permission_hygienehigh SD-003
phases/09-package-upload-present.md
permission_hygienehigh SD-003
phases/09-package-upload-present.md
securityhigh SD-007
references/artifact-packaging.md
securitycritical SD-001
references/secret-scrubbing.md
permission_hygienehigh SD-003
references/secret-scrubbing.md
permission_hygienehigh SD-003
references/secret-scrubbing.md
permission_hygienehigh SD-003
references/secret-scrubbing.md
permission_hygienehigh SD-003
references/secret-scrubbing.md
1 suppressed by AI triage
permission_hygienehigh SD-003 benign_example
references/run-resolution.md

The script merely sets a temporary scratch directory under /tmp, which is a benign and expected usage rather than malicious path traversal.