asklokesh/claudeskill-loki-mode

The curl request targets localhost for a test script, not an external host, so it is benign.

The curl request targets localhost for a test script, not an external host, so it is benign.

Standard Bun installation instruction in documentation; not malicious.

Common curl-pipe-install pattern used for setup; benign documentation.

Reference to installing Bun via curl is part of documentation, not an ongoing outbound network call.

The entry documents a standard installation command and does not execute a network call.

The snippet describes an example installation command, not an actual execution of a curl pipe to bash.

The line shows a Docker volume mapping; it does not indicate a path traversal vulnerability.

The file reference is part of configuration documentation and not an active credential access mechanism.

The line is a cleanup command in documentation that removes temporary files, not an exploitable path traversal.

The line is documentation warning about safe usage of a cleanup command, not an actual vulnerability.

Documentation shows a user‑run installer command, not an automatic outbound call.

Same installer snippet; user explicitly executes curl | bash, not an automated execution.

The URL is included only in a comment for documentation and does not trigger an outbound network call or grant permissions.

The absolute path references a cleanup of temporary files in /tmp, not an arbitrary directory traversal or write operation.

The script explicitly ignores post-install fields and never executes them.

The tuple defines fields that would imply code execution but they are never run, only reported.

Same as above – the script lists executable-like fields but does not execute them.

Example curl commands in a README, not an executed threat.

Illustrative curl request in documentation, not an active exploit.

Sample curl POST command shown only for reference in docs.

Documentation example of a stop request, not an actual call.

Example pause command in README, purely illustrative.

Resume command shown as sample usage in documentation.

SSE stream example in docs, harmless.

Logs command displayed only for demonstration purposes.

Reference to localhost indicates internal traffic, not an outbound call to an external host.

Log message shows server listening on localhost, no external outbound network activity.