The detect_malicious_metadata_check.py report is generating false positives due the HeuristicResult.SKIP values being evaluated incorrectly in the internal ProbLog model. The value of 0.0 assigned to a heuristic causes it to be evaluated as false. This is what is generating the false positives.