google/skills google-cloud-filestore-nfs-browser
Checked the catalogued skill at google-cloud-filestore-nfs-browser.
A set by no findings on this axis
D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →
A set by no findings on this axis
11 suppressed by AI triage
Text describes error messages containing ../, not actual code execution.
Reference to script list, no DNS lookup or tunneling indicated.
Reference to /etc/fstab is part of instructional documentation, not executable code.
Reference to /etc/fstab is part of instructional documentation, not executable code.
The base64 encoding is used to safely transmit and execute a script over SSH, a common legitimate practice.
Importing urllib.request is a normal part of client functionality, not a malicious outbound call.
Construction of a urllib.request.Request is preparatory for legitimate communication with the bridge service.
The urllib.request.urlopen call is used to communicate with a trusted bridge endpoint as part of normal tool operation.
The URL is used only in a unit test, not in production code.
The URL reference appears only in a test context, not in live code.
The bridge URL is passed as a command‑line argument in a test, not executed in production.