Scanned skills

wecomteam/wecom-cli wecomcli-pptx

Checked the catalogued skill at wecomcli-pptx.

SkillTrust corpus scan 2 November 2026 v0.13.0 via skillsh Verify on GitHub
D AI-triaged 3
D Security

D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →

A Permissions

A set by no findings on this axis

A Transparency

A set by no findings on this axis

3 findings
securityhigh SD-007
scripts/build_page.py
securityhigh SD-007
scripts/build_page.py
securityhigh SD-007
scripts/build_page.py
10 suppressed by AI triage
securitymedium SD-008 benign_example
references/component-chart.md

Base64 string appears in a documentation file, likely an embedded image or data, not indicative of malicious code.

permission_hygienehigh SD-003 benign_example
references/templates/README.md

Markdown link uses relative path within repository, not an actual file access

permission_hygienehigh SD-003 benign_example
references/templates/README.md

Documentation references and placeholder paths are not executed, so no traversal risk

permission_hygienehigh SD-003 benign_example
references/templates/README.md

Relative links in docs pose no real file‑system access threat

securityhigh SD-007 benign_example
scripts/build_page.py

String constants contain XML namespace URLs, no actual network request is made.

securityhigh SD-007 benign_example
scripts/build_page.py

String constants contain XML namespace URLs, no actual network request is made.

securityhigh SD-007 benign_example
scripts/build_page.py

String constants contain XML namespace URLs, no actual network request is made.

securityhigh SD-007 benign_example
scripts/build_page.py

String constants contain XML namespace URLs, no actual network request is made.

permission_hygienehigh SD-003 benign_example
scripts/pptx2image.py

Listing known system paths for soffice is benign, not a path traversal vulnerability.

permission_hygienehigh SD-003 benign_example
scripts/pptx2image.py

Listing known system paths for soffice is benign, not a path traversal vulnerability.