Add SafeSkill security badge (95/100 — Verified Safe)

[OyaAIProd]

✅ SafeSkill Security Scan Results

Metric	Value
Overall Score	95/100 (Verified Safe)
Code Score	98/100
Content Score	88/100
Findings	79 findings detected (2 critical)
Taint Flows	0
Files Scanned	17
Scan Duration	3.4s

Note: This package is an MCP server — child_process, filesystem, and environment access are expected capabilities for tool servers and are excluded from scoring and top findings.

Top Findings

• 🟠 high: Dynamic require with non-literal argument (tsup.config.ts:12)
• 🟠 high: Imports crypto module "node:crypto" (co-occurs with network access) (src/auth/oauth.ts:1)
• 🟠 high: Crypto operation randomBytes() near network code (potential exfiltration prep) (src/auth/oauth.ts:16)
• 🟠 high: Crypto operation createHash() near network code (potential exfiltration prep) (src/auth/oauth.ts:17)
• 🟠 high: Crypto operation randomBytes() near network code (potential exfiltration prep) (src/auth/oauth.ts:25)

View full report on SafeSkill

---

About SafeSkill

SafeSkill is a free, open-source security scanner for AI tools, MCP servers, and Claude Code skills. We scan for code exploits, prompt injection, and data exfiltration risks.

False positive? We take accuracy seriously. If any finding above is incorrect, please open an issue and we will fix it immediately.

• GitHub | Website | Docs
• Built by Oya.ai -- AI Employees Builder