annotate
Facilitates flexible annotation workflows for AI applications, enabling data ingestion, feedback configuration, and transcript annotation.
Install this skill
or
54/100
Security score
The annotate skill was audited on Feb 9, 2026 and we found 10 security issues across 2 threat categories, including 2 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
high line 194
Curl to non-GitHub URL
SourceSKILL.md
| 194 | **REQUIRED STEP:** Call `curl -s http://localhost:8000/openapi.json` to get documentation on interacting with the FastAPI server. |
medium line 208
Curl to non-GitHub URL
SourceSKILL.md
| 208 | curl -s -X POST "http://localhost:8000/feedback-config" -H "Content-Type: application/json" -d @.haize_annotations/new_config.json |
medium line 253
Curl to non-GitHub URL
SourceSKILL.md
| 253 | curl -s http://localhost:8000/openapi.json > .haize_annotations/tmp/annotation_api_spec.json && wc -l .haize_annotations/tmp/annotation_api_spec.json |
high line 261
Curl to non-GitHub URL
SourceSKILL.md
| 261 | Handy helper: `TC_ID=$(cat /tmp/tc_id.txt) && curl -s -X POST "http://localhost:<backend-port>/api/test-cases/$TC_ID/visualize"` |
low line 187
External URL reference
SourceSKILL.md
| 187 | - Backend Annotations API: `http://localhost:<backend port>` |
low line 188
External URL reference
SourceSKILL.md
| 188 | - Frontend UI: `http://localhost:<front-end port>` |
low line 194
External URL reference
SourceSKILL.md
| 194 | **REQUIRED STEP:** Call `curl -s http://localhost:8000/openapi.json` to get documentation on interacting with the FastAPI server. |
low line 208
External URL reference
SourceSKILL.md
| 208 | curl -s -X POST "http://localhost:8000/feedback-config" -H "Content-Type: application/json" -d @.haize_annotations/new_config.json |
low line 253
External URL reference
SourceSKILL.md
| 253 | curl -s http://localhost:8000/openapi.json > .haize_annotations/tmp/annotation_api_spec.json && wc -l .haize_annotations/tmp/annotation_api_spec.json |
low line 261
External URL reference
SourceSKILL.md
| 261 | Handy helper: `TC_ID=$(cat /tmp/tc_id.txt) && curl -s -X POST "http://localhost:<backend-port>/api/test-cases/$TC_ID/visualize"` |
Scanned on Feb 9, 2026
View Security DashboardGitHub Stars 106
Rate this skill
Categorydata analytics
UpdatedMay 21, 2026
majiayu000/claude-skill-registry