Scanned skills

nomadamas/k-skill sharenuri-facility-search

Checked the catalogued skill at sharenuri-facility-search.

SkillTrust corpus scan 8 November 2026 v0.13.0 via skillsh Verify on GitHub
D AI-triaged 3
D Security

D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →

A Permissions

A set by no findings on this axis

A Transparency

A set by no findings on this axis

3 findings
securityhigh SD-007
instruction.md
securitymedium SD-008
scripts/sharenuri_search.py
securitymedium SD-008
scripts/sharenuri_search.py
8 suppressed by AI triage
securitymedium SD-008 benign_example
instruction.md

No base64 payload visible; likely false positive.

securitymedium SD-008 benign_example
instruction.md

No base64 payload visible; likely false positive.

securityhigh SD-007 benign_example
scripts/sharenuri_search.py

Script uses urllib to make legitimate HTTP requests to an external API.

securityhigh SD-007 benign_example
scripts/sharenuri_search.py

Reference to an external base URL is a normal configuration for a web‑scraping script.

securityhigh SD-007 benign_example
scripts/sharenuri_search.py

User-Agent string includes a legitimate GitHub reference; not a malicious outbound call.

securityhigh SD-007 benign_example
scripts/sharenuri_search.py

Opening an HTTP opener with cookie handling is standard for a network client.

securityhigh SD-007 benign_example
scripts/sharenuri_search.py

Sending a Request object with urllib to the configured URLs is normal behavior for this script.

securityhigh SD-007 benign_example
tests/test_sharenuri_search.py

URL is a static data string in a test file, not an executed network call