Scanned skills

trailofbits/skills supply-chain-risk-auditor

Checked the catalogued skill at supply-chain-risk-auditor.

SkillTrust corpus scan 7 November 2026 v0.13.0 via skillsh Verify on GitHub
F AI-triaged 65
D Security

D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →

F Permissions

F; retained sample includes a critical finding · SD-004 · what this rule accepts as a false positive →

A Transparency

A set by no findings on this axis

showing 10 of 65
securityhigh SD-007
scripts/collect.py
securityhigh SD-007
scripts/collect.py
permission_hygienehigh SD-003
scripts/collect.py
permission_hygienecritical SD-004
scripts/collect.py
securityhigh SD-007
scripts/sources.py
securityhigh SD-007
scripts/sources.py
securityhigh SD-007
scripts/sources.py
securityhigh SD-007
scripts/sources.py
securityhigh SD-007
scripts/sources.py
securityhigh SD-007
scripts/sources.py
3 suppressed by AI triage
securityhigh SD-007 benign_example
scripts/test_sources.py

The file contains documentation, not code, and only references a detected outbound call in text, not an actual network operation.

securityhigh SD-007 benign_example
scripts/test_sources.py

Documentation config example, not an active outbound call.

securityhigh SD-007 benign_example
scripts/test_sources.py

The file is a markdown documentation, containing only placeholder text with no executable code or configuration that initiates outbound calls.