permission_hygienehigh SD-003 benign_example README.mdThe path refers to a documentation link to a sibling directory, not used for code execution or file access, so it does not pose a real threat.
transparencymedium SD-007 benign_example assets/examples/business-internet-premium-fttc-simple-offer/Business-Internet-Premium-FTTC_DataPack.jsonThe file only contains a static URL for a placeholder image, not an executable outbound call.
transparencymedium SD-007 benign_example assets/examples/business-internet-premium-fttc-simple-offer/Business-Internet-Premium-FTTC_DataPack.jsonIt is a static image reference in a data file, not an active network request.
transparencymedium SD-007 benign_example assets/examples/business-internet-premium-fttc-simple-offer/Business-Internet-Premium-FTTC_DataPack.jsonThe URL is embedded in product image metadata, not a runtime call.
transparencymedium SD-007 benign_example assets/examples/business-internet-premium-fttc-simple-offer/Business-Internet-Premium-FTTC_DataPack.jsonThe entry merely references an image resource, not an executable network call.
securitymedium SD-008 benign_example assets/examples/business-internet-premium-fttc-simple-offer/Business-Internet-Premium-FTTC_ParentKeys.jsonThe string at line 6 is a UUID-like identifier, not a Base64-encoded payload.
transparencymedium SD-007 benign_example assets/examples/business-internet-pro-vpl-simple-offer/Business-Internet-Pro-VPL_DataPack.jsonThe entry is a static image reference in a data pack, not an active outbound call.
transparencymedium SD-007 benign_example assets/examples/business-internet-pro-vpl-simple-offer/Business-Internet-Pro-VPL_DataPack.jsonThe entry is a static image reference in a data pack, not an active outbound call.
transparencymedium SD-007 benign_example assets/examples/business-internet-pro-vpl-simple-offer/Business-Internet-Pro-VPL_DataPack.jsonThe entry is a static image reference in a data pack, not an active outbound call.
transparencymedium SD-007 benign_example assets/examples/business-internet-pro-vpl-simple-offer/Business-Internet-Pro-VPL_DataPack.jsonThe entry is a static image reference in a data pack, not an active outbound call.
securitymedium SD-008 benign_example assets/examples/business-internet-pro-vpl-simple-offer/Business-Internet-Pro-VPL_ParentKeys.jsonThe string is a plain identifier, not a base64-encoded payload.
securitymedium SD-008 benign_example assets/examples/samsung-galaxy-s22-bundle/Samsung-Galaxy-S22-Bundle_ParentKeys.jsonThe string appears to be an identifier, not base64 data.
securitymedium SD-008 benign_example assets/examples/samsung-galaxy-s22-bundle/Samsung-Galaxy-S22-Bundle_ParentKeys.jsonThe string appears to be an identifier, not base64 data.
transparencymedium SD-007 benign_example assets/examples/static-ip-simple-offer/Static-IP_DataPack.jsonStatic image URL in data pack, no executable network call
transparencymedium SD-007 benign_example assets/examples/static-ip-simple-offer/Static-IP_DataPack.jsonStatic image URL in data pack, no executable network call
transparencymedium SD-007 benign_example assets/examples/static-ip-simple-offer/Static-IP_DataPack.jsonStatic image URL in data pack, no executable network call
transparencymedium SD-007 benign_example assets/examples/static-ip-simple-offer/Static-IP_DataPack.jsonStatic image URL in data pack, no executable network call
securitymedium SD-008 benign_example assets/parent-keys-template.jsonThe string is a hexadecimal ID, not a Base64 encoded payload.
securitymedium SD-008 benign_example assets/parent-keys-template.jsonThe string is a hexadecimal ID, not a Base64 encoded payload.
transparencymedium SD-007 benign_example assets/product2-offer-template.jsonStatic image reference to a trusted Salesforce domain, not an executable or malicious payload.
transparencymedium SD-007 benign_example assets/product2-offer-template.jsonSame trusted image URL used for static content; no evidence of malicious behavior.
transparencymedium SD-007 benign_example assets/product2-offer-template.jsonProduct image reference pointing to internal Salesforce host, harmless configuration.
transparencymedium SD-007 benign_example assets/product2-offer-template.jsonURL used only for static asset retrieval; no executable or exfiltration risk identified.
securitymedium SD-008 benign_example examples/business-internet-plus-bundle/Business-Internet-Plus_ParentKeys.jsonThe string appears to be a GUID-like hexadecimal identifier, not Base64-encoded content.