Add SafeSkill security badge (77/100 — Passes with Notes)

[OyaAIProd]

⚠️ SafeSkill Security Scan Results

Metric	Value
Overall Score	77/100 (Passes with Notes)
Code Score	80/100
Content Score	66/100
Findings	219 findings detected (12 critical)
Taint Flows	0
Files Scanned	16
Scan Duration	1.9s

Top Findings

• 🔴 critical: Imports child_process module (mcp-server/src/tools/get-state.ts:5)
• 🔴 critical: Imports child_process module (mcp-server/src/tools/repo-preflight.ts:5)
• 🔴 critical: Imports child_process module (mcp-server/dist/index.js:21171)
• 🔴 critical: Imports child_process module (mcp-server/dist/index.js:22042)
• 🔴 critical: Spawns child process (mcp-server/dist/index.js:2792)

View full report on SafeSkill

---

About SafeSkill

SafeSkill is a free, open-source security scanner for AI tools, MCP servers, and Claude Code skills. We scan for code exploits, prompt injection, and data exfiltration risks.

False positive? We take accuracy seriously. If any finding above is incorrect, please open an issue and we will fix it immediately.

• GitHub | Website | Docs
• Built by Oya.ai -- AI Employees Builder