antfu/skills pnpm
Checked the catalogued skill at pnpm.
D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →
D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →
A set by no findings on this axis
8 suppressed by AI triage
Documentation example, no real path traversal code.
The file is documentation describing best practices, likely citing the runtime download pattern as a warning rather than an actual malicious action.
The flagged content is generic documentation; no actual path traversal code or file operations are present
Same as above: the mention is part of a best-practices guide, not an executable download-and-run snippet.
The flagged content appears to be documentation prose, not executable code, so it poses no real path traversal risk.
The file is documentation and contains no executable code, only a placeholder statement about outbound network calls.
No real file path or traversal pattern appears in the content, just a redacted placeholder.
The file is documentation prose with no actual post-install scripts; the scanner likely flagged a false positive.