daymade/claude-code-skills github-contributor
Checked the catalogued skill at github-contributor.
A set by no findings on this axis
D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →
A set by no findings on this axis
17 suppressed by AI triage
The path is a relative reference in documentation, not an executable path traversal.
The documentation contains no actual path traversal syntax, only a placeholder indicating redaction.
No real file path or traversal pattern appears in the content, just a redacted placeholder.
The excerpt shows no concrete path traversal, only a generic redaction indicator.
The file is documentation prose with no executable code or path traversal constructs present, so the flag is likely a false positive.
The flagged path likely appears only as an example in documentation, not executable code, so it poses no real threat.
No path traversal or system directory references present in the file content around the flagged lines.
No path traversal string or file reference is present in the context; the empty lines suggest a false positive.
File contains only documentation prose and empty lines, no path traversal code present.
The file is documentation and contains no actual path traversal code.
No path traversal evidence in the context; the line contains only empty content.
The content is documentation; no actual path traversal is present.
The /tmp/pr_body.md path appears only in documentation examples and is not used by the skill.
The /tmp/assets-worktree path is a sample path in documentation, not an executable reference.
The /tmp/assets-worktree path appears only in an example code block, not executed.
The cp /tmp/screenshot_*.png reference is an example in documentation, not used by the skill.
The /tmp/assets-worktree path is part of an illustrative example, not a real file operation performed by the skill.