Skill Scanner · impeccable

Skill package contains many files

.

Skill declares no Write tool but bundled scripts write files

C:\Users\mkyou\Documents\GitHub\Skillmd\apps\ingest\out\audit-local\skills\33834\SKILL.md

Code uses search/grep patterns but Grep tool not in allowed-tools

C:\Users\mkyou\Documents\GitHub\Skillmd\apps\ingest\out\audit-local\skills\33834\SKILL.md

Attempts to conceal actions from the user

reference\craft.md:5

SKILL DISCOVERY ABUSE detected by YARA

reference\live.md:174

Outbound network request primitives in JavaScript/TypeScript

scripts\concept-seed.mjs:156

Outbound network request primitives in JavaScript/TypeScript

scripts\concept-seed.mjs:182

Node.js filesystem access that could read or write sensitive data

scripts\context.mjs:663

Node.js filesystem access that could read or write sensitive data

scripts\context.mjs:736

Node.js filesystem access that could read or write sensitive data

scripts\context.mjs:798

Node.js filesystem access that could read or write sensitive data

scripts\context.mjs:847

Node.js filesystem access that could read or write sensitive data

scripts\context.mjs:969

Node.js filesystem access that could read or write sensitive data

scripts\context.mjs:979

Node.js filesystem access that could read or write sensitive data

scripts\context.mjs:988

Outbound network request primitives in JavaScript/TypeScript

scripts\context.mjs:1007

Node.js filesystem access that could read or write sensitive data

scripts\context.mjs:1039

Node.js child_process module usage for shell command execution

scripts\context.mjs:1345

Node.js filesystem access that could read or write sensitive data

scripts\critique-storage.mjs:71

Node.js filesystem access that could read or write sensitive data

scripts\critique-storage.mjs:124

Node.js filesystem access that could read or write sensitive data

scripts\critique-storage.mjs:148