bmad-code-org/bmad-method bmad-toolsmith
Checked the catalogued skill at bmad-toolsmith.
A set by no findings on this axis
A set by no findings on this axis
A set by no findings on this axis
No issues flagged by the static checks in the scanned files.
10 suppressed by AI triage
The file content contains no DNS queries or data encoding patterns; the flagged phrase is unrelated to the actual text.
The term appears in documentation, not an executable hook
"post-install-notes" is a key in a data structure, not an executable post-install hook.
The matched absolute path is part of a docstring describing allowed paths, not an actual file reference.
The matched Windows absolute path is part of a docstring describing allowed paths, not an actual file reference.
The file only contains documentation, not an actual network import, so no outbound call is made.
The line defines a set of network module names, not an import; no outbound call occurs.
Test data includes an absolute path but it is not used for malicious file access.
Test data references a URL but no outbound network call is executed.
Test data contains a relative path reference for documentation purposes, not for actual traversal.