jimliu/baoyu-skills baoyu-post-to-wechat
Checked the catalogued skill at baoyu-post-to-wechat.
D; retained sample includes a high finding · SD-022 · what this rule accepts as a false positive →
F; retained sample includes a critical finding · SD-004 · what this rule accepts as a false positive →
A set by no findings on this axis
6 suppressed by AI triage
The path refers to a user SSH key in a configuration file, not a malicious path traversal.
The path refers to a standard SSH known_hosts file in configuration, not an attack.
Sample output demonstrates the use of /tmp paths for temporary files; no code performs path traversal.
Sample output includes an absolute path for a temporary image file; it is not a malicious path traversal.
The URL is a constant referencing the official WeChat domain and there is no evidence of an actual outbound network call in this context.
The URL points to a local test server (127.0.0.1), not an external host.