aws/agent-toolkit-for-aws rds-db2
Checked the catalogued skill at rds-db2.
F; retained sample includes a critical finding · SD-009 · what this rule accepts as a false positive →
F set by findings not listed
B; retained sample includes a medium finding · SD-007 · what this rule accepts as a false positive →
8 suppressed by AI triage
Documentation shows a legitimate curl to fetch a trusted certificate from AWS, not malicious
The base64 decode is part of normal documentation to extract a public key and import token for KMS usage, not malicious obfuscation.
Same context; the base64 decode extracts an import token in a legitimate tutorial, not a malicious obfuscation.
The curl command is part of a documentation example to download a cert bundle, not an executed or malicious operation.
The file is documentation, not executable code; the referenced outbound call is only noted in prose and not an actual configuration.
The text is a documentation note describing a logged outbound call, not an executable network request.
The file is documentation describing outbound network call patterns, not an executed call or configuration enabling such calls.
The file only contains documentation text about a detected outbound network call, with no actual code or permission grant present.