Skill Studio — Local Skill Marketplace for AI Agents

──trigger-string-evasion — Security Report

Skilltrigger-string-evasion

Publisheroakencore

OverallFAIL

Scanned by vskill platform — 52 built-in patterns + 3 external SAST tools (semgrep, njsscan, trufflehog). Dependencies enriched with Socket.dev supply chain scores. Public Snyk and Socket.dev reports linked where available.

──Scanning Pipeline

Tier 1: Pattern Scanner (52 checks)

PASS85/100

Tier 2: LLM Analysis

PENDING

semgrep

PASS100/100b7e5890

njsscan

PASS100/100b7e5890

trufflehog

FAIL50/100b7e5890

──Tier 1 Detail

VerdictPASS

Score85/100

Patterns52

Findings0

──External Intelligence

Not on npm — external intelligence is only available for skills published as npm packages.

──External SAST Detail

Provider	Status	Score	Critical	High	Medium	Low	Date	Commit	Actions
semgrep	PASS	100	0	0	0	0	May 22, 2026	b7e5890	View details →
njsscan	PASS	100	0	0	0	0	May 22, 2026

──Commit Integrity

SHAb7e5890 →

Repositoryoakencore/skillvet →