larksuite/cli lark-mail
Checked the catalogued skill at lark-mail.
F; retained sample includes a critical finding · SD-002 · what this rule accepts as a false positive →
D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →
A set by no findings on this axis
7 suppressed by AI triage
The path is a static link in documentation, not used for file access by code.
The path traversal pattern appears only in a documentation link and does not represent executable code; thus it poses no real threat.
The relative path is used only in documentation to reference another file in the repository, not for execution, so it poses no threat.
Reference to a relative path in documentation, not used in code execution, hence benign.
The path traversal is only a documentation reference, not executed code, so it poses no threat.
The path reference appears only in documentation, not executable code, so it poses no real threat.
The link uses a relative path traversal in documentation, which is harmless and not executed.