jaganpro/sf-skills sf-diagram-mermaid
Checked the catalogued skill at sf-diagram-mermaid.
D set by findings not listed
D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →
A set by no findings on this axis
15 suppressed by AI triage
The snippet is example code showing how to obtain a Salesforce OAuth token; it is benign documentation, not malicious execution.
This is illustrative Python code for a legitimate token request, not an actual threat.
It demonstrates a standard API call to Salesforce, purely instructional and harmless.
Documentation example of OAuth device flow, not malicious code
Documentation example of polling token endpoint, not malicious code
Python example of OAuth device flow in documentation, benign
Python example of token polling in documentation, benign
Example curl command used in documentation, not an active threat.
requests.post example is part of documentation, not an active attack.
This is a documentation example of a curl command, not executable code.
The snippet shows a library call in documentation, not an active outbound network operation.
It is a documented example of revoking a token, not a real network request being made by the application.
The absolute path is shown only as a user example in documentation, not executed code.
The absolute path is used only in README instructions, not in executable code.
The absolute path appears only as a command example in documentation, not as part of runtime logic.