nomadamas/k-skill market-event-impact
Checked the catalogued skill at market-event-impact.
D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →
A set by no findings on this axis
B; retained sample includes a medium finding · SD-007 · what this rule accepts as a false positive →
29 suppressed by AI triage
The file contains only static URLs in configuration data, not executable outbound calls or permissions.
This entry only specifies a static URL in a data object, not an outbound call or permission grant.
It is a static URL reference in a configuration, not an active network call.
The URL appears only in a data field, not as an executable network permission.
It is just a static URL inside a data structure, not a permission or call.
The URL is part of a data field, not an active outbound call.
The URL is embedded in data, not an executable network request.
It is a static URL reference in configuration, not an outbound permission or call.
Only contains a static URL string, no executable network call or permission grant.
Only contains a static URL string, no executable network call or permission grant.
Only contains a static URL string, no executable network call or permission grant.
Documentation describes outbound calls; no actual code present.
Placeholder config file with no actual outbound network call.
Documentation references outbound network call patterns; not executable code.
Same reasoning: documentation example, not a threat.
Documentation contains a note about outbound network calls, not actual code or configuration that would execute them.
The file contains documentation, not code, and only references a detected outbound call in text, not an actual network operation.
This is a static reference to a legitimate public URL in event data, not an active outbound call.
This is a static reference to a legitimate public URL in event data, not an active outbound call.
This is a static reference to a legitimate public URL in event data, not an active outbound call.
This is a static reference to a legitimate public URL in event data, not an active outbound call.
This is a static reference to a legitimate public URL in event data, not an active outbound call.
This is a static reference to a legitimate public URL in event data, not an active outbound call.
This is a static reference to a legitimate public URL in event data, not an active outbound call.
The file is documentation describing outbound network call patterns, not an executed call or configuration enabling such calls.
The file is documentation only and contains no actual outbound network calls or permission grants.
The flagged test file contains no actual outbound network calls; the scanner likely misidentified a benign test configuration.
The text is a documentation note describing a logged outbound call, not an executable network request.
The line contains documentation text, not executable code or configuration that would perform outbound network calls.