Audit-Verlauf

Thirty-six alerts are false positives involving Markdown, Chinese text, service links, or documented credential configuration. Two command locations execute an unpinned npm package without an installation prompt, creating supply chain exposure. No evidence found of malicious intent, credential exfiltration, or prompt injection in the reviewed files; external package behavior was not verified.

Most detections are Markdown backticks, normal API authentication references, documentation links, or readable Chinese text rather than shell substitution, leaked secrets, or obfuscation. Two command locations execute an unpinned npm package through npx, exposing the host and inherited credentials to changing third-party code. No evidence of prompt injection or intentional exfiltration was found; external package implementation was not included for review.

All 37 static alerts match Markdown syntax, documented service configuration, or readable multilingual text rather than the alleged threats. Contextual risks remain in automatic execution of an unpinned npm package and forwarding unvalidated payment links from API errors. No evidence found of prompt injection or credential exfiltration in the supplied files; the external CLI implementation was not provided.

All 38 static alerts are false positives for their reported patterns: Markdown backticks, documented credential names, provider links, and readable Chinese text. Separate semantic risks involve executing an unpinned npm package and requiring token-bearing XHS URLs in shared outputs without redaction. No evidence found of credential harvesting, encoded payloads, or instructions to override this audit.