GPT-5 finding
Minor maintainability issues: unused variables and potential false-positive pattern
lowmaintainabilityhigh
- skills/skill-security-scan/scan.sh:186-188
- skills/skill-security-scan/scan.sh:61-74
- skills/skill-security-scan/scan.sh:93
The 'content' variable and TRUSTED_* arrays are never used, increasing noise. The 'api.key' dot is unescaped and may match unintended strings ('.' matches any char), raising false positives. While minor, these hurt readability and predictability.
Recommendation
Remove or use the 'content' variable; either implement or remove the TRUSTED_* logic; escape the dot in 'api.key' if a literal is intended ('api\.key') or adjust to likely keys (e.g., 'api[_-]?key').