Scanned skills

nomadamas/k-skill company-analysis

Checked the catalogued skill at company-analysis.

SkillTrust corpus scan 8 November 2026 v0.13.0 via skillsh Verify on GitHub
D AI-triaged 33
D Security

D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →

A Permissions

A set by no findings on this axis

A Transparency

A set by no findings on this axis

showing 10 of 33
securityhigh SD-007
scripts/fetch-public.ts
securityhigh SD-007
tests/evidence.test.js
securityhigh SD-007
tests/evidence.test.js
securityhigh SD-007
tests/evidence.test.js
securityhigh SD-007
tests/evidence.test.js
securityhigh SD-007
tests/evidence.test.js
securityhigh SD-007
tests/evidence.test.js
securityhigh SD-007
tests/evidence.test.js
securityhigh SD-007
tests/evidence.test.js
securityhigh SD-007
tests/evidence.test.js
6 suppressed by AI triage
securityhigh SD-007 benign_example
scripts/fetch-public.js

The script performs an outbound fetch to a user-supplied public URL as a legitimate data retrieval operation, not malicious exfiltration.

securityhigh SD-007 benign_example
tests/evidence.test.js

Documentation describes outbound calls; no actual code present.

securityhigh SD-007 benign_example
tests/evidence.test.ts

The flagged text is a documentation note, not executable code or configuration that initiates an outbound network call.

securityhigh SD-007 benign_example
tests/evidence.test.ts

The text appears in a documentation file and does not represent an actual outbound network call or configuration that could be executed.

securityhigh SD-007 benign_example
tests/live-multi.test.ts

The flagged text is a documentation note, not executable code or configuration that initiates an outbound network call.

securityhigh SD-007 benign_example
tests/live-multi.test.ts

The content is documentation describing a detection, not an actual outbound network call or permission grant.