Skill Scanner · last30days
independent scanner by Cisco AI Defense · skill by RajanthaR · how it works ↗
Code makes network requests; Undeclared network usage; Code uses glob/file patterns but Glob tool not in allowed-tools; +5 more
scanned 2026-08-22
Findings (20)
Code makes network requests
C:\Users\mkyou\Documents\GitHub\Skillmd\apps\ingest\out\audit-local\skills\32914\SKILL.md
Undeclared network usage
C:\Users\mkyou\Documents\GitHub\Skillmd\apps\ingest\out\audit-local\skills\32914\SKILL.md
Code uses glob/file patterns but Glob tool not in allowed-tools
C:\Users\mkyou\Documents\GitHub\Skillmd\apps\ingest\out\audit-local\skills\32914\SKILL.md
Code uses search/grep patterns but Grep tool not in allowed-tools
C:\Users\mkyou\Documents\GitHub\Skillmd\apps\ingest\out\audit-local\skills\32914\SKILL.md
File extension does not match actual content type
scripts\lib\__init__.py
Outbound network request primitives that can transmit data externally
scripts\lib\github.py:89
Outbound network request primitives that can transmit data externally
scripts\lib\github.py:91
Outbound network request primitives that can transmit data externally
scripts\lib\github.py:414
Outbound network request primitives that can transmit data externally
scripts\lib\github.py:416
Outbound network request primitives that can transmit data externally
scripts\lib\http.py:92
Outbound network request primitives that can transmit data externally
scripts\lib\http.py:107
Outbound network request primitives that can transmit data externally
scripts\lib\reddit_public.py:71
Outbound network request primitives that can transmit data externally
scripts\lib\reddit_public.py:75
Outbound network request primitives in JavaScript/TypeScript
scripts\lib\vendor\bird-search\lib\twitter-client-base.js:67
Outbound network request primitives in JavaScript/TypeScript
scripts\lib\vendor\bird-search\lib\twitter-client-base.js:72
Outbound network request primitives that can transmit data externally
scripts\lib\youtube_yt.py:415
Outbound network request primitives that can transmit data externally
scripts\lib\youtube_yt.py:417
Outbound network request primitives that can transmit data externally
scripts\lib\youtube_yt.py:479
Outbound network request primitives that can transmit data externally
scripts\lib\youtube_yt.py:481
SQL query with f-string variables (SQL injection risk)
scripts\store.py:413
What the verdicts mean
Skill Scanner reports on SkillMD's shared five-tier scale. See how Skill Scanner works ↗.
Reported as safe — no findings
Findings up to MEDIUM severity
Findings of HIGH severity
Findings of CRITICAL severity
Scan could not complete