Scanned skills
mcollina/skills node
Checked the catalogued skill at node.
D AI-triaged 4
D Security
D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →
A Permissions
A set by no findings on this axis
A Transparency
A set by no findings on this axis
4 findings
rules/assets/graceful-server.test.ts
rules/assets/graceful-server.test.ts
rules/assets/graceful-server.test.ts
rules/assets/graceful-server.ts
5 suppressed by AI triage
rules/assets/graceful-server.test.ts
Same reasoning: documentation example, not a threat.
rules/async-patterns.md
Example fetch calls in documentation, not actual runtime code
rules/async-patterns.md
Example fetch call with timeout in documentation, not real execution
rules/logging.md
The absolute path appears only in documentation to configure a logger, not in executable code that could traverse the filesystem.
rules/streams.md
The snippet is a documented example of a legitimate internal API call, not malicious.