cursor/plugins orchestrate
Checked the catalogued skill at orchestrate.
F; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →
F set by findings not listed
B; retained sample includes a medium finding · SD-007 · what this rule accepts as a false positive →
7 suppressed by AI triage
Test file contains a static URL string, not an active outbound network call.
Only a repo URL reference is present; no outbound call or permission grant is executed or granted
The code merely passes a GitHub URL as an argument in a test; it does not perform an outbound network request itself.
Hardcoded repository URL in test data, not an executed network call.
Hardcoded test URL in a mock implementation; no actual network call performed.
The string is a repository URL used for configuration, not an active outbound network call.
Same as above; purely descriptive.