aws/agent-toolkit-for-aws rds-sqlserver
Checked the catalogued skill at rds-sqlserver.
D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →
F; retained sample includes a critical finding · SD-006 · what this rule accepts as a false positive →
B; retained sample includes a medium finding · SD-007 · what this rule accepts as a false positive →
7 suppressed by AI triage
The file is documentation, and the scanner’s match indicates redacted placeholder text, not an actual secret.
The string is an AWS ARN pattern within a policy, not an actual secret value.
The outbound call is a simple connectivity test to an internal RDS host, not exfiltration or malicious activity.
The file is a documentation text with no executable code or config that would enable outbound network calls.
The line contains an ARN for a Secrets Manager resource, which is a policy reference rather than a hard‑coded secret or credential value.
The snippet is example documentation for connectivity testing, not an active outbound network call performed by the application.
The file is documentation, not executable code; the referenced outbound call is only noted in prose and not an actual configuration.