Scanned skills

wecomteam/wecom-cli wecomcli-sheet

Checked the catalogued skill at wecomcli-sheet.

SkillTrust corpus scan 2 November 2026 v0.13.0 via skillsh Verify on GitHub
C AI-triaged 1
GitHub
C Security

C; retained sample includes a medium finding · SD-008 · what this rule accepts as a false positive →

A Permissions

A set by no findings on this axis

A Transparency

A set by no findings on this axis

1 finding
securitymedium SD-008
scripts/recalc.py
2 suppressed by AI triage
permission_hygienehigh SD-003 benign_example
scripts/collect.py

The line is a comment within a path validation function that checks for '..' segments and blocks them, not performing traversal.

securityhigh SD-007 benign_example
scripts/recalc.py

URL is part of XML schema reference, not an outbound network call.