Skip to content

Add SafeSkill security badge (95/100 — Verified Safe)#1

Open
OyaAIProd wants to merge 1 commit into
TribalHouse:mainfrom
OyaAIProd:safeskill-scan-1778983740351
Open

Add SafeSkill security badge (95/100 — Verified Safe)#1
OyaAIProd wants to merge 1 commit into
TribalHouse:mainfrom
OyaAIProd:safeskill-scan-1778983740351

Conversation

@OyaAIProd

Copy link
Copy Markdown

✅ SafeSkill Security Scan Results

Metric Value
Overall Score 95/100 (Verified Safe)
Code Score 100/100
Content Score 86/100
Findings 72 findings detected (7 critical)
Taint Flows 2
Files Scanned 4
Scan Duration 1.4s

Note: This package is an MCP serverchild_process, filesystem, and environment access are expected capabilities for tool servers and are excluded from scoring and top findings.

Top Findings

  • 🟠 high: Opens WebSocket connection (index.mjs:887)
  • 🟡 medium: Imports network module (index.mjs:38)
  • 🟡 medium: Imports network module "net" (index.mjs:38)
  • 🟡 medium: Hidden/invisible text detected (html-comment) at byte offset 19545: "Maintainer notes:

GitHub repo topics to set (Settings → About → Topics):
clau..." (README.md:343)

View full report on SafeSkill


About SafeSkill

SafeSkill is a free, open-source security scanner for AI tools, MCP servers, and Claude Code skills. We scan for code exploits, prompt injection, and data exfiltration risks.

False positive? We take accuracy seriously. If any finding above is incorrect, please open an issue and we will fix it immediately.

Signed-off-by: SafeSkill Scanner <mk@oya.ai>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant