Scanned skills

secondsky/claude-skills web-performance-optimization

Checked the catalogued skill at web-performance-optimization.

SkillTrust corpus scan 28 September 2026 v0.13.0 via skillsh Verify on GitHub
D AI-triaged 2
D Security

D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →

A Permissions

A set by no findings on this axis

A Transparency

A set by no findings on this axis

2 findings
securityhigh SD-007
references/typescript-advanced.md
securityhigh SD-007
references/typescript-advanced.md
6 suppressed by AI triage
securityhigh SD-007 benign_example
SKILL.md

Standard service worker caching logic, no exfiltration or malicious intent detected.

securityhigh SD-007 benign_example
SKILL.md

Typical analytics fetch to local endpoint, not an external malicious call.

securityhigh SD-007 benign_example
references/compression-monitoring.md

The code shows an internal analytics call to a same‑origin endpoint, not an external host.

securityhigh SD-007 benign_example
references/compression-monitoring.md

This is a documented internal fetch used for telemetry, not an outbound external request.

securityhigh SD-007 benign_example
references/compression-monitoring.md

The fallback analytics POST is to a same‑origin endpoint, benign.

securityhigh SD-007 benign_example
references/compression-monitoring.md

Retrying stored analytics to a same‑origin batch endpoint is a normal internal operation.