vskill
SkillsStudioOur approachDocs
Resources
WatchSubmitPublishersTrust centerQueueInsightsDesktop app
Login
vskill

Focused expertise. Inspectable evidence.

SkillsStudioWatchPublishersTrustDocsQueueSubmitInsightsGitHubnpmSpecWeave

MIT License

<< Back to skill
──xiaoma-create-story — Security Report
Skillxiaoma-create-story
Publisherzqyl-xiaoma
Repositoryzqyl-xiaoma/xiaoma-cli-release →
OverallPASS

Scanned by vskill platform — 52 built-in patterns + 3 external SAST tools (semgrep, njsscan, trufflehog). Dependencies enriched with Socket.dev supply chain scores. Public Snyk and Socket.dev reports linked where available.

──Scanning Pipeline
Tier 1: Pattern Scanner (52 checks)
PASS90/100
Tier 2: LLM Analysis
PENDING
──Tier 1 Detail
VerdictPASS
Score90/100
Patterns52
Findings0
──External Intelligence
npm Package@zeyue0329/xiaoma-cli
Socket.devunavailable
Socket.dev report →Snyk advisory →