vskill
SkillsStudioOur approachDocs
Resources
WatchSubmitPublishersTrust centerQueueInsightsDesktop app
Login
vskill

Focused expertise. Inspectable evidence.

SkillsStudioWatchPublishersTrustDocsQueueSubmitInsightsGitHubnpmSpecWeave

MIT License

<< Back to skill
──en — Security Report
Skillen
Publisherbianliuzhu
Repositorybianliuzhu/an-cli →
OverallFAIL

Scanned by vskill platform — 52 built-in patterns + 3 external SAST tools (semgrep, njsscan, trufflehog). Dependencies enriched with Socket.dev supply chain scores. Public Snyk and Socket.dev reports linked where available.

──Scanning Pipeline
Tier 1: Pattern Scanner (52 checks)
PASS95/100
Tier 2: LLM Analysis
PENDING
semgrep
FAIL65/100c5909a0
njsscan
PASS95/1006317379
trufflehog
PASS100/1006317379
──Tier 1 Detail
VerdictPASS
Score95/100
Patterns52
Findings0
──External Intelligence
npm Packageanl
Socket.devunavailable
Socket.dev report →Snyk advisory →
──External SAST Detail
ProviderStatusScoreCriticalHighMediumLowDateCommitActions
semgrepFAIL650210Aug 31, 2026c5909a0View details →
njsscanPASS950010May 29, 2026
──Commit Integrity
SHAc5909a0 →
Repositorybianliuzhu/an-cli →
6317379
View details →
trufflehogPASS1000000May 29, 20266317379View details →