Add SafeSkill security badge (60/100 — Use with Caution)

[OyaAIProd]

🟠 SafeSkill Security Scan Results

Metric	Value
Overall Score	60/100 (Use with Caution)
Code Score	100/100
Content Score	65/100
Findings	6 findings detected (1 critical)
Taint Flows	0
Files Scanned	0
Scan Duration	0.2s

Top Findings

• 🔴 critical: Tool/shell abuse instruction detected (tool-abuse-pattern): "add ~/.ssh" (docs/airgapped.md:328)
• 🟠 high: Data exfiltration pattern detected (sensitive-path-access): "Copy your public key to the cluster's ~/.ssh" (docs/airgapped.md:447`)
• 🟠 high: Context boundary escape detected (fake-xml-boundary): "" (src/aexp/slash_commands/aexp-validate.md:24)
• 🟠 high: Data exfiltration pattern detected (data-exfil-pattern): "curl -X POST .../api/kernels -d" (src/aexp/vendor/limina/docs/setup/jupyter-mcp.md:372)
• ⚪ low: Hidden/invisible text detected (html-comment) at byte offset 4520: "agentic-experiments:begin" (docs/cli.md:104)

View full report on SafeSkill

---

About SafeSkill

SafeSkill is a free, open-source security scanner for AI tools, MCP servers, and Claude Code skills. We scan for code exploits, prompt injection, and data exfiltration risks.

False positive? We take accuracy seriously. If any finding above is incorrect, please open an issue and we will fix it immediately.

• GitHub | Website | Docs
• Built by Oya.ai -- AI Employees Builder