google/skills api-gateway-mcp-server
Checked the catalogued skill at api-gateway-mcp-server.
D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →
A set by no findings on this axis
B; retained sample includes a medium finding · SD-007 · what this rule accepts as a false positive →
7 suppressed by AI triage
The file is an agent skill manifest, not executable code, and the matched content appears to be a placeholder or redacted comment rather than active DNS exfiltration logic.
The file is documentation that merely references DNS exfiltration without containing any active code or configuration that would perform such activity.
The text appears to describe an alert message in documentation, not an actual exfiltration activity.
Documentation file contains no executable or configuration code indicating DNS exfiltration.
Documentation file, no executable code or real base64 data found.
Documentation example illustrating outbound network call permission, not an active threat
Documentation file, no DNS exfiltration payload or patterns present.