Scanned skills

shepsci/kaggle-skill kaggle

Checked the catalogued skill at kaggle.

SkillTrust corpus scan 4 October 2026 v0.13.0 via skillsh Verify on GitHub
F AI-triaged 41
F Security

F; retained sample includes a critical finding · SD-013 · what this rule accepts as a false positive →

A Permissions

A set by no findings on this axis

B Transparency

B set by findings not listed in the stored summary

showing 10 of 41
securitycritical SD-013
modules/badges/scripts/phase_5_streaks.py
securitycritical SD-013
modules/badges/scripts/phase_5_streaks.py
securitycritical SD-013
modules/badges/scripts/phase_5_streaks.py
securitycritical SD-013
modules/badges/scripts/phase_5_streaks.py
securityhigh SD-007
modules/competitions/hackathons/scripts/fetch_writeup.py
securityhigh SD-007
modules/competitions/hackathons/scripts/fetch_writeup.py
securityhigh SD-007
modules/competitions/hackathons/scripts/list_writeups.py
securityhigh SD-007
modules/competitions/scripts/competition_brief.py
securityhigh SD-007
modules/competitions/scripts/list_competitions.py
securityhigh SD-007
modules/competitions/scripts/list_competitions.py
5 suppressed by AI triage
permission_hygienehigh SD-003 benign_example
modules/badges/scripts/phase_3_pipeline.py

Uses a relative path 'model.json', not an absolute or traversal path.

securityhigh SD-007 benign_example
modules/badges/scripts/phase_4_browser.py

Only a string reference to an external URL, no network call is made.

securityhigh SD-007 benign_example
modules/badges/scripts/phase_4_browser.py

Only a string reference to an external URL, no network call is made.

securityhigh SD-007 benign_example
modules/badges/scripts/phase_4_browser.py

Only a string reference to an external URL, no network call is made.

securityhigh SD-007 benign_example
modules/badges/scripts/phase_4_browser.py

Only a string reference to an external URL, no network call is made.