The Grade Report: weekly grades in your inbox. Subscribe →
The Grade Report

claude-skill

validate-sarif.sh

DRisky

mhrzn30/Parentportal

set -eu

validate-sarif.sh got grade D on our automated scan on 2026-11-04.

Why this grade

  • Has a line over 4000 characters, too long to scan reliably.
  • Tells the agent to skip permissions or safety checks.
  • Tells the agent to skip permissions or safety checks.
  • Repo has no license.

What grade D means · How the scan works

Before you install

  1. Read any scripts this skill ships.
  2. Note every URL it fetches.
  3. Check allowed-tools and hooks.

Embed this grade

Add this badge to your README. It shows the current grade from CheckSkills.

CheckSkills grade D

Report this skill if the grade looks wrong, or if something slipped through.

Related

DRiskyclaude-skill

log

szymdzum/browser-debugger-cli

One row per merged PR, appended with ship log <pr> … right after the merge. The retro reads it to decide what to keep: which step found what, what each PR cost, and what escaped to main.

HTML comment contains hidden instructions.

    CCautionclaude-skill

    basicComponent.js

    mhrzn30/Parentportal

    /**

    Some files were not scanned (too many, too big, or not text), so the grade is capped at C.

      DRiskyclaude-skill

      generate_report.py

      xiaoyuge886/aigc

      """Generate comprehensive index metadata report"""

      Image alt text contains hidden instructions.

        DRiskyclaude-skill

        87Ybz1pE2F4

        thesved/epic-skills

        URL: https://www.youtube.com/watch?v=87Ybz1pE2F4 Views: 1663 Date: 20260903 Length: 5:39 ADDRESSES GOAL: Yes, provides real usage data, speed/cost numbers, prompting strategies for long agentic runs, and comparisons with GPT-5.6 Sol. HANDS-ON: Yes (OpenCode terminal CLI harness connected via API).

        Tells the agent to skip permissions or safety checks.

          DRiskyclaude-skill

          migration-guide

          Clarit-AI/Plexium

          The Claude Code SDK has been renamed to the Claude Agent SDK and its documentation has been reorganized. This change reflects the SDK's broader capabilities for building AI agents beyond just coding tasks.

          Tells the agent to skip permissions or safety checks.