Scanned skills

yuan1z0825/nature-skills nature-citation

Checked the catalogued skill at nature-citation.

SkillTrust corpus scan 7 November 2026 v0.13.0 via skillsh Verify on GitHub
D AI-triaged 13
D Security

D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →

A Permissions

A set by no findings on this axis

A Transparency

A set by no findings on this axis

showing 10 of 13
securityhigh SD-007
scripts/nature_citation.py
securityhigh SD-007
scripts/nature_citation.py
securityhigh SD-007
scripts/nature_citation.py
securityhigh SD-007
scripts/nature_citation.py
securityhigh SD-007
scripts/nature_citation.py
securityhigh SD-007
scripts/nature_citation.py
securityhigh SD-007
scripts/nature_citation.py
securityhigh SD-007
scripts/nature_citation.py
securityhigh SD-007
scripts/nature_citation.py
securitymedium SD-008
scripts/nature_citation.py
6 suppressed by AI triage
permission_hygienehigh SD-003 benign_example
references/script-usage.md

The path is an example of a temporary directory for script output, not a malicious traversal.

securityhigh SD-007 benign_example
scripts/nature_citation.py

The flagged text is a documentation note, not executable code or configuration that initiates an outbound network call.

securityhigh SD-007 benign_example
scripts/nature_citation.py

Documentation references outbound network call patterns; not executable code.

securityhigh SD-007 benign_example
scripts/nature_citation.py

The file contains documentation, not code, and only references a detected outbound call in text, not an actual network operation.

permission_hygienehigh SD-003 benign_example
static/core/workflow.md

The absolute path refers to a temporary output directory in documentation, not an actual vulnerability.

securityhigh SD-007 benign_example
tests/test_author_exports.py

The string is a literal in a test file, not an executed outbound network call.