alirezarezvani/claude-skills skill-security-auditor
Checked the catalogued skill at skill-security-auditor.
F; retained sample includes a critical finding · SD-009 · what this rule accepts as a false positive →
F; retained sample includes a critical finding · SD-004 · what this rule accepts as a false positive →
B; retained sample includes a medium finding · SD-007 · what this rule accepts as a false positive →
12 suppressed by AI triage
The file lists a pattern description, not an actual outbound network call.
The entry is a pattern description for chmod 777, not an actual permission.
The entry describes potential hidden prompts, not a real hidden instruction.
Documentation placeholder, not actual code.
The file is documentation and contains no executable code, only a placeholder statement about outbound network calls.
The text appears in a documentation file and does not represent an actual outbound network call or configuration that could be executed.
The URL appears only in a usage comment, not as an executed network request.
The reference to "/etc/" is inside a regex string, not an actual file operation.
The regex targets shell profile modifications for detection, not an actual persistence mechanism.
The pattern is a regex string detecting outbound fetch calls, not performing one.
The flagged line is part of the scanner's own regex checks for npm/yarn commands, not a malicious post-install hook.
This line is within the scanner's detection logic, not an actual post-install script, so it is a false positive.