daymade/claude-code-skills frontend-visual-qa
Checked the catalogued skill at frontend-visual-qa.
D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →
D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →
B; retained sample includes a medium finding · SD-007 · what this rule accepts as a false positive →
8 suppressed by AI triage
The excerpt is from documentation explaining outbound network call settings, not executable code
The matched text is merely a string reference to a localhost URL inside a query field, with no actual outbound network operation executed.
The file is documentation describing an outbound network call, not executing code or granting permissions, so it poses no real threat.
The manifest contains no actual path traversal or system directory references, likely a false positive detection.
The file is documentation prose with no executable code or path traversal constructs present, so the flag is likely a false positive.
Placeholder config file with no actual outbound network call.
The code is a test asserting that forbidden strings are not present; it does not perform any outbound network calls.
The flagged line is documentation, not executable code, so it poses no real threat.