getsentry/skills gha-security-review
Checked the catalogued skill at gha-security-review.
F; retained sample includes a critical finding · SD-009 · what this rule accepts as a false positive →
D set by findings not listed
B; retained sample includes a medium finding · SD-007 · what this rule accepts as a false positive →
5 suppressed by AI triage
The flagged line is empty and part of documentation, not executable code.
The flagged text is a documentation note, not executable code or configuration that initiates an outbound network call.
The file is documentation and contains a placeholder text about credential access detection, not actual credential paths.
Documentation content references credential access patterns but likely for illustration, not real secret access.
The matched text contains no credential paths, so the detection is a false positive.