Scanned skills

nomadamas/k-skill mfds-food-safety

Checked the catalogued skill at mfds-food-safety.

SkillTrust corpus scan 8 November 2026 v0.13.0 via skillsh Verify on GitHub
A AI-triaged 0
A Security

A set by no findings on this axis

A Permissions

A set by no findings on this axis

A Transparency

A set by no findings on this axis

0 findings

No issues flagged by the static checks in the scanned files.

8 suppressed by AI triage
securityhigh SD-007 benign_example
scripts/mfds_food_safety.py

The code imports urllib.request for legitimate outbound requests to a configured proxy, not for malicious exfiltration.

securityhigh SD-007 benign_example
scripts/mfds_food_safety.py

DEFAULT_PROXY_BASE_URL points to a known proxy server used by the application, indicating legitimate network usage.

securityhigh SD-007 benign_example
scripts/mfds_food_safety.py

read_json_response uses urllib.request.urlopen to fetch data from a controlled proxy endpoint, part of normal functionality.

securityhigh SD-007 benign_example
scripts/mfds_food_safety.py

Same as above, a standard request to the proxy, not a suspicious payload fetch.

securityhigh SD-007 benign_example
scripts/mfds_food_safety.py

search_food_safety constructs a URL to the proxy API for food safety data, a legitimate external call.

securityhigh SD-007 benign_example
scripts/mfds_food_safety.py

search_health_food_ingredient uses the proxy API to retrieve health ingredient info, a legitimate use case.

securityhigh SD-007 benign_example
scripts/mfds_food_safety.py

search_product_report queries the proxy API for product reports, which is expected behavior.

securityhigh SD-007 benign_example
scripts/mfds_food_safety.py

search_inspection_fail uses the proxy API to fetch inspection data, a normal outbound request.