jackwener/opencli opencli-adapter-author
Checked the catalogued skill at opencli-adapter-author.
D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →
D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →
B; retained sample includes a medium finding · SD-007 · what this rule accepts as a false positive →
16 suppressed by AI triage
The file is a documentation text with no executable code or config that would enable outbound network calls.
The file is documentation and contains only a comment about detecting outbound calls, not actual code or configuration that performs a network call.
The matched content is a placeholder comment in documentation, not executable code.
Documentation file contains example code demonstrating outbound network calls, not an actual malicious implementation.
The file is documentation, and the matched text appears to be a placeholder note rather than actual DNS exfiltration code.
The file is a markdown documentation, containing only placeholder text with no executable code or configuration that initiates outbound calls.
The matched content is a placeholder comment in documentation, not executable code.
Documentation contains a note about outbound network calls, not actual code or configuration that would execute them.
The path /tmp/raw-<command>.html is a benign example in documentation, not an actual file write by malicious code.
The path reference is in a non-executable doc file and cannot be used for actual traversal.
The content is a documentation excerpt describing a normal fetch call to a legitimate API endpoint, not malicious activity.
The text is a documentation example describing a curl command, not an actual outbound call in the code.
The passage explains a fetch-based network pattern in documentation, not an executed network call.
The text describes defensive strategies and reference to fetch usage, not an actual outbound network call in executable code.
The file is a documentation snippet and contains no executable code that performs path traversal
The file is documentation with no actual path traversal string present, indicating a false positive.