Scanned skills

nomadamas/k-skill kosis-stats

Checked the catalogued skill at kosis-stats.

SkillTrust corpus scan 8 November 2026 v0.13.0 via skillsh Verify on GitHub
D AI-triaged 24
GitHub
D Security

D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →

A Permissions

A set by no findings on this axis

B Transparency

B set by findings not listed in the stored summary

showing 10 of 24
securityhigh SD-007
scripts/run_kosis_stats.py
securityhigh SD-007
scripts/run_kosis_stats.py
securityhigh SD-007
scripts/run_kosis_stats.py
securityhigh SD-007
scripts/run_kosis_stats.py
securityhigh SD-007
scripts/run_kosis_stats.py
securityhigh SD-007
scripts/run_kosis_stats.py
securityhigh SD-007
scripts/run_kosis_stats.py
securityhigh SD-007
scripts/run_kosis_stats.py
securityhigh SD-007
scripts/run_kosis_stats.py
securityhigh SD-007
scripts/run_kosis_stats.py
2 suppressed by AI triage
securityhigh SD-022 benign_example
instruction.md

The file is a font recommendation guide, not a network configuration, making DNS exfiltration extremely unlikely and the match appears to be a false positive.

securityhigh SD-007 benign_example
tests/test_run_kosis_stats.py

The file only contains documentation text about a detected outbound network call, with no actual code or permission grant present.