Scanned skills

yizhiyanhua-ai/fireworks-tech-graph fireworks-tech-graph

Checked the catalogued skill at fireworks-tech-graph.

SkillTrust corpus scan 14 September 2026 v0.10.0 via skillsh Verify on GitHub
F AI-triaged 48
F Security

F set by findings not listed

D Permissions

D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →

B Transparency

B; retained sample includes a medium finding · SD-007 · what this rule accepts as a false positive →

showing 10 of 48
transparencymedium SD-007
package.json
transparencymedium SD-007
package.json
transparencymedium SD-007
package.json
permission_hygienehigh SD-003
references/diagram-layout-reference.md
permission_hygienehigh SD-003
references/png-export.md
permission_hygienehigh SD-003
references/png-export.md
permission_hygienehigh SD-003
references/style-2-dark-terminal.md
transparencymedium SD-007
schemas/architecture-v1.schema.json
transparencymedium SD-007
schemas/architecture-v1.schema.json
transparencymedium SD-007
schemas/diagram-v1.schema.json
5 suppressed by AI triage
permission_hygienehigh SD-003 benign_example
README.md

The absolute path reference is in a README example, not executed code.

permission_hygienehigh SD-003 benign_example
README.zh.md

The path reference appears only in documentation, not executable code, and therefore poses no real threat.

transparencymedium SD-007 benign_example
assets/icons/cloud/manifest-v1.json

This JSON only lists external icon URLs, not executing or allowing network calls.

transparencymedium SD-007 benign_example
assets/icons/cloud/manifest-v1.json

This is a configuration entry referencing a public URL, not a permission grant or execution.

transparencymedium SD-007 benign_example
assets/icons/cloud/manifest-v1.json

The file merely declares external icon locations, not an actual outbound network operation.