📦

Audit-Verlauf

security-checklist - 6 Audits

Audit-Version 6

Neueste Mittleres Risiko

Jun 28, 2026, 10:30 AM

Static analysis flagged many dangerous patterns, but review shows they are mostly documentation examples, defensive test payloads, and checklist items. No malicious intent or prompt injection was found. The skill still carries medium operational risk because it instructs agents to run local scanners, write scan reports, and handle secret-scan results.

2
Gescannte Dateien
1,270
Analysierte Zeilen
11
befunde
codex
Auditiert von
Probleme mit mittlerem Risiko (3)
Local Security Tool Execution Guidance
TRUE POSITIVE for operational risk. The skill instructs agents to run npm audit, pip-audit, Semgrep, Bandit, TruffleHog, Trivy, and related shell commands. These are legitimate defensive tools, but they execute local commands, can create report files, and may contact package or vulnerability services.
Project-Mutating Dependency Fix Command
TRUE POSITIVE for change risk. The skill includes npm audit fix as a recommended mitigation command. This command can modify dependency lockfiles or installed packages, so it should require user approval in managed workflows.
Secret Scan Output Handling
TRUE POSITIVE for sensitive-data handling risk. The skill teaches agents to run secret scanners and save results, which may contain secret types or sensitive repository evidence. It does not direct exfiltration, but outputs should be treated as confidential.
Probleme mit niedrigem Risiko (3)
Dangerous Payloads Used as Defensive Test Examples
FALSE POSITIVE for malicious behavior. SQL injection strings, command substitution strings, internal IP addresses, and metadata endpoint URLs appear as security test cases and SSRF checklist items. They are not executed by the skill files.
Unsafe Code Patterns Presented as Anti-Patterns
FALSE POSITIVE for direct exploit code. eval, exec, shell=True, weak hashing, and vulnerable request examples are presented as bad examples with safer alternatives or mitigation guidance. The documentation warns users to avoid these patterns.
Sensitive Keyword Matches Without Credential Access
FALSE POSITIVE for credential theft. SECRET_KEY, environment variable guidance, private key mentions, and cookie SameSite text are part of secure configuration examples or checklist language. No evidence found of reading real secrets or sending them to a remote endpoint.

Erkannte Muster

Shell Commands in DocumentationNetwork and SSRF Test Targets

Audit-Version 5

Sicher

Jan 16, 2026, 05:07 PM

This skill is a pure markdown knowledge base containing only security documentation and educational code examples. No executable code, network calls, filesystem access, or external commands are present. All static findings (194 patterns) are false positives triggered by educational examples showing both vulnerable and secure coding patterns for documentation purposes.

3
Gescannte Dateien
1,462
Analysierte Zeilen
3
befunde
claude
Auditiert von
Keine Sicherheitsprobleme gefunden

Audit-Version 4

Sicher

Jan 16, 2026, 05:07 PM

This skill is a pure markdown knowledge base containing only security documentation and educational code examples. No executable code, network calls, filesystem access, or external commands are present. All static findings (194 patterns) are false positives triggered by educational examples showing both vulnerable and secure coding patterns for documentation purposes.

3
Gescannte Dateien
1,462
Analysierte Zeilen
3
befunde
claude
Auditiert von
Keine Sicherheitsprobleme gefunden

Audit-Version 3

Sicher

Jan 10, 2026, 10:51 AM

This skill is a pure markdown knowledge base. It contains only documentation and security guidance examples. No executable code, scripts, network calls, filesystem access, or external commands are present. The skill is a read-only reference for AI agents to understand security best practices.

2
Gescannte Dateien
1,270
Analysierte Zeilen
0
befunde
claude
Auditiert von
Keine Sicherheitsprobleme gefunden

Audit-Version 2

Sicher

Jan 10, 2026, 10:51 AM

This skill is a pure markdown knowledge base. It contains only documentation and security guidance examples. No executable code, scripts, network calls, filesystem access, or external commands are present. The skill is a read-only reference for AI agents to understand security best practices.

2
Gescannte Dateien
1,270
Analysierte Zeilen
0
befunde
claude
Auditiert von
Keine Sicherheitsprobleme gefunden

Audit-Version 1

Sicher

Jan 10, 2026, 10:51 AM

This skill is a pure markdown knowledge base. It contains only documentation and security guidance examples. No executable code, scripts, network calls, filesystem access, or external commands are present. The skill is a read-only reference for AI agents to understand security best practices.

2
Gescannte Dateien
1,270
Analysierte Zeilen
0
befunde
claude
Auditiert von
Keine Sicherheitsprobleme gefunden