briiirussell/cybersecurity-skills api-audit
Checked the catalogued skill at api-audit.
D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →
F; retained sample includes a critical finding · SD-004 · what this rule accepts as a false positive →
B; retained sample includes a medium finding · SD-007 · what this rule accepts as a false positive →
14 suppressed by AI triage
Documentation file contains example code demonstrating outbound network calls, not an actual malicious implementation.
The $schema reference points to a trusted public JSON Schema endpoint; no actual outbound network call is executed by this file.
The $id reference is a benign URL for schema identification; it does not grant or execute network access.
The flagged text is part of documentation describing post‑install hooks, not an actual lifecycle script in the codebase.
$schema field merely references an external schema, not an active outbound network call or permission grant.
$id field is a reference URI, not an active outbound call or permission grant.
Documentation explaining use of base64 decoding for cursor parsing, not malicious.
Example curl requests in documentation, not actual outbound execution.
Repeated example curl usage in documentation, benign.
The code only constructs a URL string for documentation, not performing a network call.
It sets a JSON schema URL string; no network request is made.
The informationUri is a static GitHub URL; the code does not perform any outbound call.
The outbound network call is part of a documentation example, not executed code.
The curl example appears only in documentation for permitted live checks, not actual code.