Scanned skills
forcedotcom/sf-skills omnistudio-epc-catalog-generate
Checked the catalogued skill at omnistudio-epc-catalog-generate.
C AI-triaged 25
C Security
C; retained sample includes a medium finding · SD-008 · what this rule accepts as a false positive →
A Permissions
A set by no findings on this axis
B Transparency
B; retained sample includes a medium finding · SD-007 · what this rule accepts as a false positive →
showing 10 of 25
SKILL.md
assets/examples/business-internet-premium-fttc-simple-offer/Business-Internet-Premium-FTTC_DataPack.json
assets/examples/business-internet-premium-fttc-simple-offer/Business-Internet-Premium-FTTC_DataPack.json
assets/examples/business-internet-premium-fttc-simple-offer/Business-Internet-Premium-FTTC_DataPack.json
assets/examples/business-internet-premium-fttc-simple-offer/Business-Internet-Premium-FTTC_DataPack.json
assets/examples/business-internet-pro-vpl-simple-offer/Business-Internet-Pro-VPL_DataPack.json
assets/examples/business-internet-pro-vpl-simple-offer/Business-Internet-Pro-VPL_DataPack.json
assets/examples/business-internet-pro-vpl-simple-offer/Business-Internet-Pro-VPL_DataPack.json
assets/examples/business-internet-pro-vpl-simple-offer/Business-Internet-Pro-VPL_DataPack.json
assets/examples/samsung-galaxy-s22-bundle/Samsung-Galaxy-S22-Bundle_DataPack.json
5 suppressed by AI triage
README.md
The reference to a relative path in documentation does not pose a security risk
assets/examples/business-internet-premium-fttc-simple-offer/Business-Internet-Premium-FTTC_ParentKeys.json
The string is a hexadecimal ID, not a base64-encoded payload, so no obfuscation is present.
assets/examples/business-internet-pro-vpl-simple-offer/Business-Internet-Pro-VPL_ParentKeys.json
The line contains normal identifiers, not a base64-encoded string.
assets/examples/static-ip-simple-offer/Static-IP_ParentKeys.json
The string contains typical object identifiers, not an encoded payload.
examples/business-internet-plus-bundle/Business-Internet-Plus_ParentKeys.json
The detected string appears to be a hexadecimal hash or ID, not a Base64-encoded payload, indicating a false positive.