bmad-code-org/bmad-method bmad-eval
Checked the catalogued skill at bmad-eval.
D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →
A set by no findings on this axis
A set by no findings on this axis
9 suppressed by AI triage
The context describes standard run commands and environment setup, with no indication of DNS queries or tunneling.
Code only copies or links files into a temporary HOME; no DNS queries or tunneling logic present.
Test code sets mock PATH variable for isolated environment, not used to access system files.
Test defines a temporary HOME path within the test harness, not a real user directory.
The URL is only a test fixture reference, not executed by code.
The URL appears only in test data, not in network code.
The URL is used in a test case to simulate fixture fetching, not as malicious payload.
The path is part of a unit test verifying path validation, not accessed in production.
The credential path is used only in a test to assert error handling.