If you find vskill useful, give it a star on GitHub→
vskill
LoginSkillsStudioSubmitPublishersTrustQueueDocsInsights
vskill

Securing the AI skills supply chain.

SkillsStudioPublishersTrustDocsQueueSubmitInsightsGitHubnpmSpecWeave

MIT License

<< Back to skill
── turbo-transforms — Security Report ──────────────
Skillturbo-transforms
Publishergoldsky-io
Repositorygoldsky-io/goldsky-agent →
OverallPASS

Scanned by vskill platform — 52 built-in patterns + 3 external SAST tools (semgrep, njsscan, trufflehog). Dependencies enriched with Socket.dev supply chain scores. Public Snyk and Socket.dev reports linked where available.

── Scanning Pipeline ───────────────────────────────
Tier 1: Pattern Scanner (52 checks)
PASS95/100
Tier 2: LLM Analysis
PENDING
── Tier 1 Detail ───────────────────────────────────
VerdictPASS
Score95/100
Patterns52
Findings0
── External Intelligence ───────────────────────────
npm Package@goldsky/agent-skills
Socket.devunavailable
Socket.dev report →Snyk advisory →