dataforseo/mcp-server-typescript
Checked the catalogued skill.
D; retained sample includes a high finding · SD-022 · what this rule accepts as a false positive →
F; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →
B; retained sample includes a medium finding · SD-007 · what this rule accepts as a false positive →
11 suppressed by AI triage
The URL is part of the Apache license text and does not represent an actual network call.
The matched text is a static URL reference to the Apache license, not an executed outbound network call or permission grant.
Only a static example path in documentation, not code that could be executed.
Similarly, the path traversal mention appears only in prose, not as runnable code.
No path traversal string or file reference is present in the context; the empty lines suggest a false positive.
Defines a constant URL; no network call is performed here.
Defines a constant URL; no network call is performed here.
Defines a constant URL; no network call is performed here.
The code reads credentials from environment variables, not hardcoding them.
It checks environment variables and throws an error if missing, no hardcoded secrets present.
The URL is a documentation link, not an outbound network call.