Confusing Security Error "attack-surface-report"

I believe this is related to below topic: