yuan1z0825/nature-skills nature-paper-to-patent
Checked the catalogued skill at nature-paper-to-patent.
A set by no findings on this axis
A set by no findings on this axis
B; retained sample includes a medium finding · SD-007 · what this rule accepts as a false positive →
16 suppressed by AI triage
No actual traversal string present, only placeholder text
The reference is only a comment in a docstring, not executable code.
The URL is a hard‑coded constant used by an intended crawler, not an arbitrary outbound call for malicious purposes.
The code only contains a URL string in a comment; no outbound call is performed.
EPUB_BASE is a constant string; it does not trigger any network request.
The URL is embedded in a title attribute for parsing; no outbound call is executed.
The string is an XML namespace constant, not an outbound network call.
The reference to http://www.w3.org/2000/svg is a static namespace declaration, not an outbound network request.
The code simply loads system fonts from a standard Windows path, which is harmless read access.
The path points to a standard Windows font file, used for reading only; not a malicious path traversal.
Same reasoning as above: standard, non-malicious system font path.
The URL is only used as an XML namespace URI, not an outbound network call.
The URL is only used as an XML namespace URI, not an outbound network call.
The absolute Windows path is used only in a test mock and not for actual file access.
The path appears only in an assertion within test code, not in real execution.
The path is supplied as a test argument, not used to read/write system files.