Add SafeSkill security badge (86/100 — Passes with Notes)

[OyaAIProd]

⚠️ SafeSkill Security Scan Results

Metric	Value
Overall Score	86/100 (Passes with Notes)
Code Score	86/100
Content Score	78/100
Findings	41 findings detected (2 critical)
Taint Flows	0
Files Scanned	13
Scan Duration	1.9s

Top Findings

• 🔴 critical: Bracket notation access: window['fetch'] (obfuscation technique to evade static analysis) (packages/openapi-codegen/src/runtime.ts:171)
• 🔴 critical: Bracket notation access: window['fetch'] (obfuscation technique to evade static analysis) (packages/server/src/tools.generated.ts:178)
• 🟠 high: Direct filesystem operation (packages/openapi-codegen/src/codegen.ts:52)
• 🟠 high: Direct filesystem operation (packages/openapi-codegen/src/codegen.ts:126)
• 🟠 high: Context boundary escape detected (fake-turn-marker): "User:" (packages/server/taskade-public.yaml:247)

View full report on SafeSkill

---

About SafeSkill

SafeSkill is a free, open-source security scanner for AI tools, MCP servers, and Claude Code skills. We scan for code exploits, prompt injection, and data exfiltration risks.

False positive? We take accuracy seriously. If any finding above is incorrect, please open an issue and we will fix it immediately.

• GitHub | Website | Docs
• Built by Oya.ai -- AI Employees Builder

---

Note

Low Risk
Documentation-only change adding an external badge/link; minimal code risk aside from relying on a third-party URL/image.

Overview
Adds a SafeSkill security scan badge to README.md, linking to the public scan report for this repo.

^{Reviewed by Cursor Bugbot for commit 856cd59. Bugbot is set up for automated code reviews on this repo. Configure here.}

[changeset-bot]

⚠️ No Changeset found

Latest commit: 856cd59

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR