Scanned skills

nomadamas/k-skill store-longevity-radar

Checked the catalogued skill at store-longevity-radar.

SkillTrust corpus scan 20 September 2026 v0.10.0 via skillsh Verify on GitHub
D AI-triaged 1
D Security

D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →

A Permissions

A set by no findings on this axis

A Transparency

A set by no findings on this axis

1 finding
securityhigh SD-007
tests/test_store_longevity_radar.py
7 suppressed by AI triage
securityhigh SD-007 benign_example
scripts/store_longevity_download.py

The script uses a standard HTTP GET to download data from a public government site.

securityhigh SD-007 benign_example
scripts/store_longevity_download.py

The URL points to a legitimate public data portal, indicating normal data retrieval.

securityhigh SD-007 benign_example
scripts/store_longevity_download.py

The download URL is for an official government data service, not a malicious host.

securityhigh SD-007 benign_example
scripts/store_longevity_download.py

The mirror manifest URL is a public storage location used for legitimate updates.

securityhigh SD-007 benign_example
scripts/store_longevity_download.py

The http_get function performs a benign HTTP request to fetch data.

securityhigh SD-007 benign_example
scripts/store_longevity_download.py

The urllib.request.urlopen call retrieves content from a trusted source, not exfiltrating data.

securityhigh SD-007 benign_example
scripts/store_longevity_radar.py

Only a comment contains the URL, no code performs an outbound network call or grants permissions to do so.