vskill
SkillsStudioOur approachDocs
Resources
WatchSubmitPublishersTrust centerQueueInsightsDesktop app
Login
vskill

Focused expertise. Inspectable evidence.

SkillsStudioWatchPublishersTrustDocsQueueSubmitInsightsGitHubnpmSpecWeave

MIT License

<< Back to skill
──tw — Security Report
Skilltw
Publisherpeterhajas
Repositorypeterhajas/dotfiles →
OverallFAIL

Scanned by vskill platform — 52 built-in patterns + 3 external SAST tools (semgrep, njsscan, trufflehog). Dependencies enriched with Socket.dev supply chain scores. Public Snyk and Socket.dev reports linked where available.

──Scanning Pipeline
Tier 1: Pattern Scanner (52 checks)
PASS100/100
Tier 2: LLM Analysis
PENDING
semgrep
FAIL60/100183b7e8
njsscan
PASS100/100183b7e8
trufflehog
FAIL75/1009051df5
──Tier 1 Detail
VerdictPASS
Score100/100
Patterns52
Findings0
──External Intelligence

Not on npm — external intelligence is only available for skills published as npm packages.

──External SAST Detail
ProviderStatusScoreCriticalHighMediumLowDateCommitActions
semgrepFAIL600220May 29, 2026183b7e8View details →
njsscanPASS1000000May 29, 2026
──Commit Integrity
SHA183b7e8 →
Repositorypeterhajas/dotfiles →
183b7e8
View details →
trufflehogFAIL751000Sep 2, 20269051df5View details →