If you find vskill useful, give it a star on GitHub→
vskill
LoginSkillsStudioWatchSubmitPublishersTrustQueueDocsInsights
vskill

Securing the AI skills supply chain.

SkillsStudioWatchPublishersTrustDocsQueueSubmitInsightsGitHubnpmSpecWeave

MIT License

<< Back to security report
──muratcankoylan/agent-skills-for-context-engineering/comprehensive-research-agent — semgrep Scan
Repositorymuratcankoylan/agent-skills-for-context-engineering →
Commit7a95d94 →
VerdictPASS
Score95
DateMay 14, 2026
──Findings
SeverityRuleMessageFile:Line
MEDIUMpython.lang.security.audit.eval-detected.eval-detectedDetected the use of eval(). eval() can be dangerous if used to evaluate dynamic content. If this content can be input from outside the program, this may be a code injection vulnerability. Ensure evaluated content is not definable by external sources.muratcankoylan/agent-skills-for-context-engineering/comprehensive-research-agent-1ee920ba/examples/interleaved-thinking/examples/03_full_optimization.py:995 →