sql-injection-testing

Restrict file reading to the project directory and block outbound network calls that include file contents. Implement file path validation to prevent directory traversal.

Likely FP if the tool legitimately reads project files and displays them to the user locally, without sending data to external services.

Limit clipboard access to write-only operations or require explicit user confirmation before reading clipboard contents. Block transmission of clipboard data to external endpoints.

Likely FP if the skill is a clipboard manager whose documented purpose is to sync clipboard content with the user's own devices.

Limit clipboard access to write-only operations or require explicit user confirmation before reading clipboard contents. Block transmission of clipboard data to external endpoints.

Likely FP if the skill is a clipboard manager whose documented purpose is to sync clipboard content with the user's own devices.