aws/agent-toolkit-for-aws amazon-neptune
Checked the catalogued skill at amazon-neptune.
D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →
A set by no findings on this axis
B; retained sample includes a medium finding · SD-007 · what this rule accepts as a false positive →
7 suppressed by AI triage
The curl command is part of documentation demonstrating how to invoke Neptune's bulk loader, not an active malicious operation.
The curl request is a documented example of checking loader status in Neptune, not an actual outbound network call that could exfiltrate data.
Comment notes use of Gremlin .profile(), not a shell profile change.
Same comment about .profile() in code, not a persistence mechanism.
The text appears in a documentation file and does not represent an actual outbound network call or configuration that could be executed.
The flagged text appears to be a placeholder in documentation, not an actual persistence mechanism.
Same placeholder text as above; no evidence of malicious persistence code.