aaron-he-zhu/aaron-marketing-skills competitor-tracker
Checked the catalogued skill at competitor-tracker.
A set by no findings on this axis
D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →
A set by no findings on this axis
13 suppressed by AI triage
The path uses a relative directory under the skill's own memory space, not a real path traversal.
The reference to a relative path is safe and not a true traversal.
The path is a relative reference within the skill, not an external directory.
The script path uses a variable (${CLAUDE_PLUGIN_ROOT}) that expands within the skill's environment, not an absolute system path.
Same as above; safe relative usage of variables.
Only references relative documentation paths, not system directories.
No actual traversal; only references to other skill files.
References are internal to the skill.
Only internal references, no external paths.
All paths are within the skill's own structure.
References to documentation, not system directories.
No external path traversal.
All references are internal and safe.