arrow_backAI Skill ShieldpublicDefault-branch GitHub scan
Trust report
QwenLM/qwen-code
An open-source AI coding agent that lives in your terminal.
View scanned commit on GitHubopen_in_new0%Static score
93% score7% score gap
Highest finding: High severityLatest scan
high severity
Static analysis score
Install decision
Do Not Install
Automatic execution surfaces were detected with critical or compounding risk. Hold installation until a reviewer clears the repo.
Scan identity
- Scanned
- 2026-08-08
- Commit
- 9e874534970b
- License
- Apache-2.0
- Repository
- Active
Repository scan summary
- policyFindings
- 259
- terminalInstall surface
- 108
- Repository reach
- 26,842
Validation findings detected
Execution paths reviewed
GitHub stars
Highest-priority findings
The latest default-branch scan, ordered by severity.
- highMissing required field: name.qwen/skills/codegraph/SKILL.md:1
- highMissing required field: description.qwen/skills/codegraph/SKILL.md:1
- highAuto-confirm dangerous operations.qwen/skills/qwen-code-claw/SKILL.md:147
- highAuto-confirm dangerous operations.qwen/skills/triage/SKILL.md:41
- highUI automation for security bypasspackages/cua-driver/rust/Skills/cua-driver/SKILL.md:52
Share this trust result
The badge stays linked to the latest default-branch scan for this skill path.
Do you consider this skill safe to use?
Community signals help prioritize human review; they do not change the scan verdict.
AI Skill Shield is an automated pre-install review, not a guarantee of safety. Confirm sensitive permissions and execution paths before installation.