aws/agent-toolkit-for-aws agents-build
Checked the catalogued skill at agents-build.
D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →
A set by no findings on this axis
A set by no findings on this axis
13 suppressed by AI triage
Documentation shows example outbound network call; no code execution.
Example fetch call in documentation; not executed.
Absolute path reference appears only in explanatory text; no malicious action.
Path used in example command in documentation; benign.
The line merely documents a local curl usage for development; it is not executable code, so it does not pose a real threat.
Documentation text, not executing any traversal logic.
Example curl command in docs, not a real network call.
Example POST curl in docs, harmless.
Troubleshooting example curl, not an actual outbound call.
Documentation file contains no actual Base64 content; the detection is likely a false positive.
Documentation file does not include any path traversal patterns; the alert is likely a false positive.
The occurrence of 'curl -v' is a debugging suggestion in documentation, not an actual outbound network call or permission grant.
The code only prints a URL, it does not make an outbound network request.