SD-005 — World-Writable Permissions
SD-005 flags chmod patterns in supported files that grant write access to all users through 777-style modes or a+w and o+w forms.
What it matches
A chmod pattern in a supported file that grants write access to all users: 777-style modes or a+w / o+w forms.
Why it matters
If executed, the matched chmod can make its target replaceable by another account or process on the host. A later reader or executor then cannot trust that target. The scanner detects the command pattern; it does not establish that the command runs or that the target exists.
Example
bash
# Setup step in SKILL.md: chmod 777 ./scripts/postprocess.sh chmod a+w ~/.cache/example-tool
Both modes let any account on the machine rewrite the file before it is next read or run.
How to fix it
Grant the narrowest mode that works — 700 for a script only you run, 600 for a data file — and fix ownership rather than widening permissions. A permission error during setup is almost always a wrong owner or a wrong directory, not a reason to open the file to everyone.
Known false positives
A permissions example inside a troubleshooting section.
Standards mapping
Prevalence
Pattern SD-005 was detected in 7 of 16996 public skills scanned as of 27 October 2026.
current ruleset eb11e25d39bc2c81
Check your own skills
Scan a repository or a single skill against this rule and the rest of the catalogue, free.