Add SafeSkill security badge (87/100 — Passes with Notes)#47
Add SafeSkill security badge (87/100 — Passes with Notes)#47OyaAIProd wants to merge 1 commit intoyotsuda:mainfrom
Conversation
Signed-off-by: SafeSkill Scanner <mk@oya.ai>
📝 WalkthroughWalkthroughREADME.md is updated with a new SafeSkill status badge alongside existing Shields.io badges, providing a link to the project's SafeSkill scan results. Changes
Estimated code review effort🎯 1 (Trivial) | ⏱️ ~2 minutes Poem
🚥 Pre-merge checks | ✅ 5✅ Passed checks (5 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment Warning |
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 1
🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.
Inline comments:
In `@README.md`:
- Line 8: Replace the hardcoded SafeSkill badge markdown string "[](https://safeskill.dev/scan/yotsuda-powershell-mcp)"
with the dynamic endpoint
"[](https://safeskill.dev/scan/yotsuda-powershell-mcp)"
in README.md so the badge automatically reflects the latest scan results; locate
the existing badge markdown on the line containing the SafeSkill badge and
replace it with the new API badge URL.
🪄 Autofix (Beta)
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
| [](https://www.powershellgallery.com/packages/PowerShell.MCP) | ||
| [](https://www.powershellgallery.com/packages/PowerShell.MCP) | ||
| [](https://opensource.org/licenses/MIT) | ||
| [](https://safeskill.dev/scan/yotsuda-powershell-mcp) |
There was a problem hiding this comment.
🧩 Analysis chain
🌐 Web query:
Does SafeSkill provide a dynamic badge URL (or Shields-compatible endpoint) that always shows the latest scan score/status for a repository?
💡 Result:
Yes, SafeSkill provides a dynamic badge URL at https://safeskill.dev/api/badge/{package-name} that displays the latest scan score/status for a repository or package. This endpoint generates Shields.io-compatible SVG badges showing the security score (e.g., 81/100 "Passes with Notes") based on the most recent scan, as evidenced by usage in scan result pages like https://safeskill.dev/scan/ipgeolocation-ipgeolocation-io-mcp, which includes the badge markdown . The badge updates automatically with new scans, providing a live indicator of the current status.
Citations:
- 1: https://safeskill.dev/scan/ipgeolocation-ipgeolocation-io-mcp
- 2: https://safeskill.dev/
- 3: https://github.com/VoltAgent/awesome-openclaw-skills/actions/runs/23706559962
Use SafeSkill's dynamic badge endpoint to keep the security score current.
At Line 8, the badge contains a hardcoded score (87/100 Passes with Notes) that will become stale after the next scan. SafeSkill provides a dynamic badge endpoint that updates automatically with each new scan.
Replace:
[](https://safeskill.dev/scan/yotsuda-powershell-mcp)With:
[](https://safeskill.dev/scan/yotsuda-powershell-mcp)The https://safeskill.dev/api/badge/yotsuda-powershell-mcp endpoint will always display the latest scan status.
🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.
In `@README.md` at line 8, Replace the hardcoded SafeSkill badge markdown string
"[](https://safeskill.dev/scan/yotsuda-powershell-mcp)"
with the dynamic endpoint
"[](https://safeskill.dev/scan/yotsuda-powershell-mcp)"
in README.md so the badge automatically reflects the latest scan results; locate
the existing badge markdown on the line containing the SafeSkill badge and
replace it with the new API badge URL.
2 participants
Top Findings
licenses/Ude.NetStandard/gpl-2.0.txt:69)licenses/Ude.NetStandard/lgpl-2.1.txt:134)licenses/Ude.NetStandard/MPL-1.1.txt:58)licenses/Ude.NetStandard/MPL-1.1.txt:147)licenses/Ude.NetStandard/MPL-1.1.txt:310)View full report on SafeSkill
About SafeSkill
SafeSkill is a free, open-source security scanner for AI tools, MCP servers, and Claude Code skills. We scan for code exploits, prompt injection, and data exfiltration risks.
False positive? We take accuracy seriously. If any finding above is incorrect, please open an issue and we will fix it immediately.
Summary by CodeRabbit