brightdata/skills scrape
Checked the catalogued skill at scrape.
D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →
A set by no findings on this axis
A set by no findings on this axis
11 suppressed by AI triage
Documentation describes outbound calls; no actual code present.
The flagged text is a documentation note, not executable code or configuration that initiates an outbound network call.
The code explicitly limits API calls to brightdata.com, a trusted host, so the outbound reference is benign.
It posts data to the same Bright Data API endpoint, which is a known, trusted service for this application.
The line contains a command line argument (a URL) to another script; it is not an outbound network call performed by poll.mjs.
The code simply sets a base URL and validates the host; it does not perform a network call or grant broad permissions.
Commented example usage of a URL for a legitimate scraping request
Configuration of an API base host for a trusted Bright Data service
Commented example usage of a URL for a legitimate scraping request
Actual code performing a standard fetch to a controlled external API endpoint
Commented example usage of a URL for a legitimate scraping request