jaganpro/sf-skills sf-industry-cme-epc-model
Checked the catalogued skill at sf-industry-cme-epc-model.
C; retained sample includes a medium finding · SD-008 · what this rule accepts as a false positive →
D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →
B; retained sample includes a medium finding · SD-007 · what this rule accepts as a false positive →
14 suppressed by AI triage
The file only contains a static URL for a placeholder image, not an executable outbound call.
It is a static image reference in a data file, not an active network request.
The URL is embedded in product image metadata, not a runtime call.
The entry merely references an image resource, not an executable network call.
The string at line 6 is a UUID-like identifier, not a Base64-encoded payload.
The entry is a static image reference in a data pack, not an active outbound call.
The entry is a static image reference in a data pack, not an active outbound call.
The entry is a static image reference in a data pack, not an active outbound call.
The entry is a static image reference in a data pack, not an active outbound call.
The string is a plain identifier, not a base64-encoded payload.
The string appears to be an identifier, not base64 data.
The string appears to be an identifier, not base64 data.
The string is a hexadecimal ID, not a Base64 encoded payload.
The string is a hexadecimal ID, not a Base64 encoded payload.