Add SafeSkill security badge (75/100 — Passes with Notes)

[OyaAIProd]

⚠️ SafeSkill Security Scan Results

Metric	Value
Overall Score	75/100 (Passes with Notes)
Code Score	78/100
Content Score	84/100
Findings	299 findings detected (52 critical)
Taint Flows	22
Files Scanned	34
Scan Duration	3.3s

Note: This package is an MCP server — child_process, filesystem, and environment access are expected capabilities for tool servers and are excluded from scoring and top findings.

Top Findings

• 🟠 high: Has prepare script: "make install-hooks" (package.json:0)
• 🟠 high: Detected instruction-override attempt: "act as a" (knowledge/github/reference/projects-v2/filtering-projects.md:15)
• 🟠 high: Detected instruction-override attempt: "act as a" (knowledge/github/reference/projects-v2/filtering-projects.md:15)
• ⚪ low: Imports crypto module "node:crypto" (src/profile.js:3)
• ⚪ low: Hidden/invisible text detected (html-comment) at byte offset 3064: "source: URL" (knowledge/github/README.md:58)

View full report on SafeSkill

---

About SafeSkill

SafeSkill is a free, open-source security scanner for AI tools, MCP servers, and Claude Code skills. We scan for code exploits, prompt injection, and data exfiltration risks.

False positive? We take accuracy seriously. If any finding above is incorrect, please open an issue and we will fix it immediately.

• GitHub | Website | Docs
• Built by Oya.ai -- AI Employees Builder