Scanned skills
cursor/plugins orchestrate
Checked the catalogued skill at orchestrate.
F AI-triaged 80
F Security
F; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →
F Permissions
F set by findings not listed
B Transparency
B; retained sample includes a medium finding · SD-007 · what this rule accepts as a false positive →
showing 10 of 80
schemas/state.schema.json
schemas/state.schema.json
scripts/__tests__/agent-manager-slack-mirror.test.ts
scripts/__tests__/agent-manager-slack-mirror.test.ts
scripts/__tests__/agent-manager-slack-mirror.test.ts
scripts/__tests__/agent-manager-slack-mirror.test.ts
scripts/__tests__/agent-manager-slack-mirror.test.ts
scripts/__tests__/agent-manager-slack-mirror.test.ts
scripts/__tests__/agent-manager-slack-mirror.test.ts
scripts/__tests__/agent-manager-slack-mirror.test.ts
4 suppressed by AI triage
schemas/plan.schema.json
The $schema reference points to a public JSON schema URL, a harmless static configuration rather than an executed outbound call.
schemas/plan.schema.json
The $id field contains a URL that is only an identifier, not an outbound network request, making it benign.
scripts/__tests__/andon-root-cache.test.ts
The matched URL is part of test data in a string literal, not an executed outbound network call.
scripts/__tests__/measurements-mismatch.test.ts
The URL appears only as a static string in a test configuration; no outbound network call is performed.