📦
Audit-Verlauf
untangle-codebase - 1 Audit
Audit-Version 1 Neueste
6. Nov. 2026, 15:33
All 29 static findings are false positives caused by Markdown backticks around examples, identifiers, and code fences. No evidence found of credential theft, data exfiltration, or prompt injection. One semantic risk concerns stripping function bodies without specifying a separate analysis copy, which could damage working source.
1
Gescannte Dateien
143
Analysierte Zeilen
2
Prüfelemente
0
Falschmeldungen ignoriert
Bestätigte Sicherheitsbedenken (1)
Mittel
Skeleton Generation Lacks Source Preservation Safeguard
The tip says "script away the function bodies" without requiring a separate analysis copy. Applying this directly could erase implementation and uncommitted work.
The instruction explicitly proposes removing function bodies but provides no output-location or preservation constraint. Data loss depends on the implementing agent modifying originals.
Risikofaktoren
⚙️ Externe Befehle (29)
SKILL.md:58 SKILL.md:78 SKILL.md:79 SKILL.md:80 SKILL.md:113-114 SKILL.md:114-115 SKILL.md:115 SKILL.md:116 SKILL.md:117-118 SKILL.md:118-119 SKILL.md:119 SKILL.md:120-121 SKILL.md:121 SKILL.md:122-123 SKILL.md:123 SKILL.md:124-128 SKILL.md:128-129 SKILL.md:129-130 SKILL.md:130-131 SKILL.md:131 SKILL.md:132-133 SKILL.md:133 SKILL.md:134 SKILL.md:136 SKILL.md:137-138 SKILL.md:138-139 SKILL.md:139-140 SKILL.md:140-141 SKILL.md:141
Geprüft von: codex