Scanned skills

secondsky/sap-skills sap-rpt1

Checked the catalogued skill at sap-rpt1.

SkillTrust corpus scan 18 September 2026 v0.10.0 via skillsh Verify on GitHub
D AI-triaged 1
D Security

D; retained sample includes a high finding · SD-011 · what this rule accepts as a false positive →

A Permissions

A set by no findings on this axis

A Transparency

A set by no findings on this axis

1 finding
securityhigh SD-011
references/source-review-2026-06-18.md
6 suppressed by AI triage
permission_hygienehigh SD-003 benign_example
references/enterprise-portability.md

Documentation example using an absolute path, not executable code

securityhigh SD-011 benign_example
references/enterprise-portability.md

Guidance to install a dependency manually, not an automatic vulnerable dependency usage

securityhigh SD-007 benign_example
scripts/rpt1_oss_predict.py

The script only prints a URL reference and does not perform any outbound network calls.

securityhigh SD-011 benign_example
scripts/rpt1_oss_predict.py

The code merely prints a pip install instruction, it does not execute any untrusted package source.

securityhigh SD-007 benign_example
scripts/rpt1_oss_predict.py

Only a printed instruction refers to an external URL; no actual network operation is performed.

securityhigh SD-011 benign_example
scripts/rpt1_oss_predict.py

The code contains only a print statement about installing from a URL, not a real dependency pull.