alirezarezvani/claude-skills senior-backend
Checked the catalogued skill at senior-backend.
A set by no findings on this axis
D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →
B; retained sample includes a medium finding · SD-007 · what this rule accepts as a false positive →
12 suppressed by AI triage
The fetch call is part of example documentation illustrating SSRF, not an actual code execution.
The fetch call in this documented example demonstrates safe URL validation, not real deployment code.
The preinstall script shown is a harmless audit command, not a malicious post-install hook.
The absolute path is part of a documentation example and does not represent executable code.
Reference to URL is only in docstring, not executable.
Reference to URL appears in usage examples, not code.
Reference to URL is part of usage examples, not actual request.
Importing urllib.request does not perform a network call; no request is made here.
URL references are in argument parser epilog; no execution.
URL references are in argument parser epilog; no execution.
URL references are in argument parser epilog; no execution.
URL references are in argument parser epilog; no execution.