briiirussell/cybersecurity-skills web-pentest
Checked the catalogued skill at web-pentest.
D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →
A set by no findings on this axis
B; retained sample includes a medium finding · SD-007 · what this rule accepts as a false positive →
9 suppressed by AI triage
The line is part of documentation and merely references DNS exfiltration detection, not an actual exfiltration activity.
The file is documentation and contains no executable code, only a placeholder statement about outbound network calls.
$schema field merely references an external schema, not an active outbound network call or permission grant.
$id field is a reference URI, not an active outbound call or permission grant.
The code only constructs a URL string for documentation, not performing a network call.
It sets a JSON schema URL string; no network request is made.
The informationUri is a static GitHub URL; the code does not perform any outbound call.
The outbound network call is part of a documentation example, not executed code.
The curl example appears only in documentation for permitted live checks, not actual code.