Add SafeSkill security badge (91/100 — Verified Safe)#1
Open
OyaAIProd wants to merge 1 commit into
Open
Conversation
Signed-off-by: SafeSkill Scanner <mk@oya.ai>
unitedideas
pushed a commit
that referenced
this pull request
Apr 18, 2026
…earch NHS was ranking hijacked domains that serve Indonesian gambling content (spell.so = MEGAWIN288, tronalddump.io = SLOT88, scraperbox.com = JNETOTO, icndb.com = ROYALTOGEL) above legitimate agentic products — bringyour.ai wasn't in top-30 for its own "harness migration" target query because a gambling site with llms.txt + openapi signals beat it on text relevance. - crawler.isSpam(): high-precision content detector. Two Indonesian gambling markers (kemenangan/taruhan/judi/bandar/situs slot/agen slot/togel) or one Thai phrase (แทงบอล/บาคาร่า) or one English SEO-farm brand (megawin/slot gacor/slot88/togelpedia) → flagged. Single-marker Indonesian words alone do NOT match — avoids false positives on legit Javanese cultural content. - crawler pipeline: spam category zeros AgenticScore (kept in index for audit access via ?category=spam, excluded from default search). - queries.SearchSites: default excludes category='spam' unless caller passes p.Category='spam' explicitly. - spam_test.go: 7 subtests locking in detection (4 real spam cases + 3 legit-site guards); TestCategorize_SpamShortCircuit verifies spam flag runs before legitimate category rules. - Backfilled 4 existing entries via `crawler -recategorize`. After fix: "harness migration" now ranks bringyour.ai #1 (score 100, developer) — previously surfaced spell.so #1 (score 50, gambling). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
unitedideas
pushed a commit
that referenced
this pull request
Jun 1, 2026
…o AI agents' + site-owner llms.txt line Adds the site-owner/buyer query NHS monetizes (free score -> monitor -> paid fix) to the domain-root title, description, OG/Twitter tags, a real homepage H1 (was empty on /), and one llms.txt line. Copy/metadata only — no logic, routes, or pricing changed. Mirrors the ADB change that moved it absent->#1 for buyer queries. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
✅ SafeSkill Security Scan Results
Top Findings
skills/nothumansearch/SKILL.md:105)View full report on SafeSkill
About SafeSkill
SafeSkill is a free, open-source security scanner for AI tools, MCP servers, and Claude Code skills. We scan for code exploits, prompt injection, and data exfiltration risks.
False positive? We take accuracy seriously. If any finding above is incorrect, please open an issue and we will fix it immediately.