netresearch/security-audit-skill security-audit
Checked the catalogued skill at security-audit.
F set by findings not listed
F; retained sample includes a critical finding · SD-004 · what this rule accepts as a false positive →
B; retained sample includes a medium finding · SD-007 · what this rule accepts as a false positive →
10 suppressed by AI triage
The hardcoded key appears only in example documentation, not in production code, so it is not an actual secret leak.
The file is documentation text referencing /etc/passwd, not code that traverses paths or reads the file.
The occurrence of /etc/passwd is within explanatory prose, not a credential access operation in code.
The file is documentation, containing no executable code that performs path traversal.
The flagged text appears in documentation, not in executable code, indicating no actual path traversal usage.
The matched text is part of documentation describing path traversal detection, not an actual code path that could be exploited.
The matched phrase appears only in documentation, not a reference to a credential path, so no real threat.
Outbound network call patterns are described in documentation, not active code.
The matched text is part of documentation describing an outbound call example, not an actual executed call.
Documentation example illustrating outbound network call permission, not an active threat