larksuite/cli lark-base
Checked the catalogued skill at lark-base.
A set by no findings on this axis
D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →
A set by no findings on this axis
7 suppressed by AI triage
The path traversal occurs only in a documentation link, not in executable code, posing no runtime threat.
The path reference is a documentation link, not executable code that could traverse the filesystem.
The file is documentation prose that merely references path traversal concepts, not an actual traversal in code or configuration.
The relative path is only a documentation link, not an executable file read/write operation.
The path reference is only in documentation, not executable code, so it cannot be used to traverse the filesystem.
The file contains only blank lines with no path traversal strings; the match is likely a false positive.
The file is a markdown documentation file with no evidence of path traversal; the matched content appears to be a scanner false positive.