asklokesh/claudeskill-loki-mode
Checked the catalogued skill.
F; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →
F; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →
B set by findings not listed in the stored summary
5 suppressed by AI triage
The curl command targets localhost for local testing, not an external host, so it poses no real threat.
The curl command targets localhost for local testing, not an external host, so it poses no real threat.
The outbound curl command installs an official package in a documented setup step.
The absolute path mapping is a documented Docker volume mount, not an arbitrary path traversal.
Reference to credential file is part of documented configuration, not an accidental credential exposure.