Scanned skills

samber/cc-skills-golang golang-spf13-viper

Checked the catalogued skill at golang-spf13-viper.

SkillTrust corpus scan 2 October 2026 v0.13.0 via skillsh Verify on GitHub
F AI-triaged 5
A Security

A set by no findings on this axis

F Permissions

F; retained sample includes a critical finding · SD-004 · what this rule accepts as a false positive →

A Transparency

A set by no findings on this axis

5 findings
permission_hygienehigh SD-003
evals/evals.json
permission_hygienecritical SD-004
evals/evals.json
permission_hygienecritical SD-004
evals/evals.json
permission_hygienehigh SD-003
references/sources-and-formats.md
permission_hygienehigh SD-003
references/sources-and-formats.md
1 suppressed by AI triage
permission_hygienecritical SD-004 benign_example
references/binding-and-env.md

The reference to ".credentials" is in a key name and env var, not a filesystem path, so no secret access is implied.