google/skills secops-triage
Checked the catalogued skill at secops-triage.
D; retained sample includes a high finding · SD-022 · what this rule accepts as a false positive →
D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →
A set by no findings on this axis
18 suppressed by AI triage
The text is a reference table entry for Kubernetes, not a DNS query, indicating a false positive.
The document contains placeholder documentation, not an actual base64-encoded malicious payload.
The absolute path reference appears in documentation, not executable code, so it poses no real threat.
Documentation includes placeholder text, not an active network request.
The file is a documentation prose that merely references DNS exfiltration detection, not containing malicious code or behavior.
Same as above, a descriptive example rather than real exfiltration.
The file is documentation; the quoted text is an explanatory note, not an actual DNS exfiltration activity.
The content is part of documentation, describing a persistence mechanism example rather than actual configuration.
The file is documentation that simply references scanner findings, not containing malicious code.
The file is documentation and only references a path traversal pattern, not executable code.
The flagged text is a placeholder comment in a skill manifest, not executable DNS exfiltration code.
Example config snippet in documentation, not an actual outbound call.
Documentation references static file paths for grep, not actual code execution.
Static documentation of grep usage, no real path traversal.
Documentation shows example grep command, not a threat.
Describes DNS query patterns for monitoring, not evidence of exfiltration.
Documentation merely cites system paths; no executable code or traversal attack.
Reference to system file in prose is harmless and not a vulnerability.