Scanned skills

tw93/waza health

Checked the catalogued skill at health.

SkillTrust corpus scan 2 November 2026 v0.13.0 via skillsh Verify on GitHub
F AI-triaged 6
A Security

A set by no findings on this axis

F Permissions

F; retained sample includes a critical finding · SD-004 · what this rule accepts as a false positive →

A Transparency

A set by no findings on this axis

6 findings
permission_hygienehigh SD-003
scripts/collect-data.sh
permission_hygienehigh SD-003
scripts/collect-data.sh
permission_hygienecritical SD-004
scripts/collect-data.sh
permission_hygienehigh SD-003
scripts/collect-data.sh
permission_hygienehigh SD-003
scripts/collect-data.sh
permission_hygienehigh SD-003
scripts/collect-data.sh
12 suppressed by AI triage
permission_hygienehigh SD-003 benign_example
agents/inspector-context.md

The text merely references a user path in documentation, not an actual path traversal attempt.

securitycritical SD-013 benign_example
agents/inspector-control.md

Content explicitly states launchctl commands are normal personal workflow, not a malicious persistence mechanism.

permission_hygienehigh SD-003 benign_example
agents/inspector-control.md

The context provides guidance on checking allowedDirectories, not an actual path traversal exploit.

permission_hygienehigh SD-003 benign_example
scripts/check-agent-context.sh

Reference to system binary /usr/bin/readlink is legitimate and not a path traversal risk.

permission_hygienehigh SD-003 benign_example
scripts/check-agent-context.sh

Absolute reference to system binary /usr/bin/readlink is benign in this context.

permission_hygienehigh SD-003 benign_example
scripts/check-doc-refs.sh

The script references a standard system binary /usr/bin/readlink for resolving symlinks, which is safe and not an exploit.

permission_hygienehigh SD-003 benign_example
scripts/check-doc-refs.sh

Same as above; the absolute path points to a legitimate utility, not a malicious path traversal.

permission_hygienehigh SD-003 benign_example
scripts/check-maintainability.sh

Reference to system binary /usr/bin/readlink is legitimate and not a path traversal risk.

permission_hygienehigh SD-003 benign_example
scripts/check-maintainability.sh

Absolute reference to system binary /usr/bin/readlink is benign in this context.

permission_hygienehigh SD-003 benign_example
scripts/check-verifier-output.sh

Reference to system binary /usr/bin/readlink is legitimate and not a path traversal risk.

permission_hygienehigh SD-003 benign_example
scripts/check-verifier-output.sh

Absolute reference to system binary /usr/bin/readlink is benign in this context.

permission_hygienehigh SD-003 benign_example
scripts/check_verifier_output.py

The flagged path is only in a comment, not used for file access