Scanned skills

yeachan-heo/oh-my-claudecode project-session-manager

Checked the catalogued skill at project-session-manager.

SkillTrust corpus scan 8 November 2026 v0.13.0 via skillsh Verify on GitHub
D AI-triaged 25
D Security

D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →

D Permissions

D set by findings not listed

A Transparency

A set by no findings on this axis

showing 10 of 25
securityhigh SD-007
lib/parse.sh
securityhigh SD-007
lib/parse.sh
securityhigh SD-007
lib/providers/azure-devops.sh
securityhigh SD-007
lib/providers/bitbucket.sh
securityhigh SD-007
lib/providers/bitbucket.sh
securityhigh SD-007
lib/providers/bitbucket.sh
securityhigh SD-007
lib/providers/bitbucket.sh
securityhigh SD-007
lib/providers/bitbucket.sh
securityhigh SD-007
lib/providers/bitbucket.sh
securityhigh SD-007
lib/providers/gitea.sh
4 suppressed by AI triage
securityhigh SD-007 benign_example
lib/parse.sh

The flagged text is a documentation note, not executable code or configuration that initiates an outbound network call.

securityhigh SD-007 benign_example
lib/providers/jira.sh

Comment referencing external URL; no outbound call executed.

securityhigh SD-007 benign_example
lib/providers/jira.sh

Echoes a URL string; no network call performed.

securityhigh SD-007 benign_example
psm.sh

Line 152 only documents a GitHub URL reference format, not an actual outbound network call or permission grant.