Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Appearance settings

Add SafeSkill security badge (60/100 — Use with Caution)#22

Open
OyaAIProd wants to merge 1 commit into
KadenMc:mainKadenMc/agentic-experiments:mainfrom
OyaAIProd:safeskill-scan-1779329216671OyaAIProd/agentic-experiments:safeskill-scan-1779329216671Copy head branch name to clipboard
Open

Add SafeSkill security badge (60/100 — Use with Caution)#22
OyaAIProd wants to merge 1 commit into
KadenMc:mainKadenMc/agentic-experiments:mainfrom
OyaAIProd:safeskill-scan-1779329216671OyaAIProd/agentic-experiments:safeskill-scan-1779329216671Copy head branch name to clipboard

Conversation

@OyaAIProd

Copy link
Copy Markdown

🟠 SafeSkill Security Scan Results

Metric Value
Overall Score 60/100 (Use with Caution)
Code Score 100/100
Content Score 65/100
Findings 6 findings detected (1 critical)
Taint Flows 0
Files Scanned 0
Scan Duration 0.2s

Top Findings

  • 🔴 critical: Tool/shell abuse instruction detected (tool-abuse-pattern): "add ~/.ssh" (docs/airgapped.md:328)
  • 🟠 high: Data exfiltration pattern detected (sensitive-path-access): "Copy your public key to the cluster's ~/.ssh" (docs/airgapped.md:447`)
  • 🟠 high: Context boundary escape detected (fake-xml-boundary): "" (src/aexp/slash_commands/aexp-validate.md:24)
  • 🟠 high: Data exfiltration pattern detected (data-exfil-pattern): "curl -X POST .../api/kernels -d" (src/aexp/vendor/limina/docs/setup/jupyter-mcp.md:372)
  • low: Hidden/invisible text detected (html-comment) at byte offset 4520: "agentic-experiments:begin" (docs/cli.md:104)

View full report on SafeSkill


About SafeSkill

SafeSkill is a free, open-source security scanner for AI tools, MCP servers, and Claude Code skills. We scan for code exploits, prompt injection, and data exfiltration risks.

False positive? We take accuracy seriously. If any finding above is incorrect, please open an issue and we will fix it immediately.

Signed-off-by: SafeSkill Scanner <mk@oya.ai>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

Morty Proxy This is a proxified and sanitized view of the page, visit original site.