Skip to content

Add SafeSkill security badge (89/100 — Passes with Notes)#1

Open
OyaAIProd wants to merge 2 commits into
waleedkhanbaloch:mainfrom
OyaAIProd:safeskill-scan-1774784704529
Open

Add SafeSkill security badge (89/100 — Passes with Notes)#1
OyaAIProd wants to merge 2 commits into
waleedkhanbaloch:mainfrom
OyaAIProd:safeskill-scan-1774784704529

Conversation

@OyaAIProd
Copy link
Copy Markdown

⚠️ SafeSkill Security Scan Results

Metric Value
Overall Score 89/100 (Passes with Notes)
Code Score 94/100
Content Score 80/100
Findings 78 findings detected (1 critical)
Taint Flows 0
Files Scanned 35
Scan Duration 1.5s

Top Findings

  • 🔴 critical: Data exfiltration pattern detected (sensitive-path-ref): "~/.config" (CONTRIBUTING.md:87)
  • 🟠 high: Has prepare script: "husky && bun run setup-hooks" (package.json:0)
  • 🟠 high: Makes HTTP request via fetch() (scripts/publish.ts:16)
  • 🟠 high: Makes HTTP request via fetch() (scripts/publish.ts:132)
  • 🟠 high: Dynamic environment variable access with computed key (tests/helpers.ts:7)

View full report on SafeSkill


This PR was automatically generated by SafeSkill — the security scanner for AI tools and MCP servers.

@waleedkhanbaloch waleedkhanbaloch force-pushed the main branch 28 times, most recently from 3bd0b8b to 2cab5f8 Compare April 2, 2026 06:18
@waleedkhanbaloch waleedkhanbaloch force-pushed the main branch 30 times, most recently from d0fcfa2 to f416fe6 Compare April 7, 2026 09:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants