Scanned skills

posthog/skills instrument-error-tracking

Checked the catalogued skill at instrument-error-tracking.

SkillTrust corpus scan 3 October 2026 v0.13.0 via skillsh Verify on GitHub
F AI-triaged 6
D Security

D; retained sample includes a high finding · SD-022 · what this rule accepts as a false positive →

F Permissions

F; retained sample includes a critical finding · SD-004 · what this rule accepts as a false positive →

A Transparency

A set by no findings on this axis

6 findings
securityhigh SD-022
references/nuxt-3-6.md
permission_hygienecritical SD-004
references/ruby-on-rails.md
permission_hygienecritical SD-004
references/ruby-on-rails.md
permission_hygienecritical SD-004
references/ruby-on-rails.md
permission_hygienecritical SD-004
references/ruby-on-rails.md
permission_hygienecritical SD-004
references/ruby-on-rails.md
7 suppressed by AI triage
securityhigh SD-022 benign_example
SKILL.md

The file is an agent skill manifest, not executable code, and the matched content appears to be a placeholder or redacted comment rather than active DNS exfiltration logic.

permission_hygienehigh SD-003 benign_example
references/angular.md

The content is documentation referencing path traversal concept, not actual traversal code.

securityhigh SD-022 benign_example
references/dotnet.md

The file is a documentation prose that only describes DNS exfiltration concepts, not an actual implementation.

securityhigh SD-022 benign_example
references/laravel.md

Normal .env configuration, no dynamic DNS or tunneling evidence.

securitymedium SD-008 benign_example
references/laravel.md

No base64 content present in the shown snippet; likely false positive.

securityhigh SD-022 benign_example
references/nextjs.md

The matched text is generic documentation, not executable exfiltration code.

securityhigh SD-022 benign_example
references/nextjs.md

Same as above – a documentation placeholder, not an active threat.