Fähigkeiten data-engineer Audit-Verlauf
📦

Audit-Verlauf

data-engineer - 4 Audits

Versionsvergleich

Änderungen an Fähigkeiten und Befunden über geprüfte Versionen hinweg, neueste zuerst.

VersionDatumErgebnisPrüfelementeÄnderung ggü. vorheriger
v4 Neueste23. Juli 2026, 23:28 1 bestätigt0Keine Änderung der Fähigkeiten
v3 15. Juli 2026, 15:03 2 bestätigt0Keine Änderung der Fähigkeiten
v2 15. Juli 2026, 15:03 2 bestätigt0Keine Änderung der Fähigkeiten
v1 15. Juli 2026, 15:03 2 bestätigt0Ausgangsbasis
Audit-Version 4 Neueste

23. Juli 2026, 23:28

All 42 backtick detections are Markdown fences or inline code, not shell execution. Eight reconnaissance matches are schema identifiers, and multilingual diagrams explain the entropy alert. Destructive delete and overwrite examples still lack confirmation, backup, and environment safeguards.

1
Gescannte Dateien
1,058
Analysierte Zeilen
2
Prüfelemente
0
Falschmeldungen ignoriert

Bestätigte Sicherheitsbedenken (1)

Mittel
SKILL.md:698SKILL.md:819-825
Destructive Data Operations Lack Guardrails
The command reference shows an ALTER TABLE DELETE, and the PySpark template uses overwrite mode. Neither example requires confirmation, backup verification, or a dry run.
Both destructive operations appear directly in reusable examples, with no adjacent safety gate. The placeholder targets reduce immediate impact but not reuse risk.

Risikofaktoren

⚙️ Externe Befehle (42)
SKILL.md:89-264 SKILL.md:264-296 SKILL.md:296-300 SKILL.md:300-333 SKILL.md:333-337 SKILL.md:337-370 SKILL.md:370-374 SKILL.md:374-409 SKILL.md:409-413 SKILL.md:413-442 SKILL.md:442-446 SKILL.md:446-475 SKILL.md:475-479 SKILL.md:479-508 SKILL.md:508-512 SKILL.md:512-548 SKILL.md:548-552 SKILL.md:552-586 SKILL.md:586-633 SKILL.md:633 SKILL.md:634 SKILL.md:635-636 SKILL.md:636 SKILL.md:659-704 SKILL.md:704-733 SKILL.md:733-739 SKILL.md:739-743 SKILL.md:743-782 SKILL.md:782-787 SKILL.md:787-826 SKILL.md:826-829 SKILL.md:829-892 SKILL.md:892-895 SKILL.md:895-947 SKILL.md:947-950 SKILL.md:950-1007 SKILL.md:1007-1013 SKILL.md:1013-1014 SKILL.md:1014-1015 SKILL.md:1015-1016 SKILL.md:1016-1017 SKILL.md:1017-1018
Geprüft von: codex
Audit-Version 3

15. Juli 2026, 15:03

All 51 static findings are false positives caused by Markdown formatting, SQL identifiers, multilingual text, and documentation examples. No prompt injection, hidden executable payload, or obfuscation was found. Operational examples can still delete or overwrite data without explicit confirmation safeguards.

1
Gescannte Dateien
1,058
Analysierte Zeilen
3
Prüfelemente
0
Falschmeldungen ignoriert

Bestätigte Sicherheitsbedenken (2)

Mittel
SKILL.md:698SKILL.md:819-825
Destructive Operations Lack Confirmation Safeguards
The command reference includes a database delete, and the PySpark template uses overwrite mode. The skill does not require confirmation, backups, or dry runs before these actions.
Both destructive patterns are explicit examples, and surrounding guidance directs the agent to deploy and run pipelines. Risk depends on access to live systems.
Niedrig
SKILL.md:802-805
Inline Credential Pattern in JDBC Example
The JDBC example places username and password values directly in pipeline code. Although placeholders, this pattern can encourage users to embed real credentials.
The username and password options are visibly embedded in the example. They are placeholders, so no actual secret exposure is present.

Risikofaktoren

⚙️ Externe Befehle (1)
SKILL.md:89-264
Geprüft von: codex
Audit-Version 2

15. Juli 2026, 15:03

All 51 static findings are false positives caused by Markdown formatting, SQL identifiers, multilingual text, and documentation examples. No prompt injection, hidden executable payload, or obfuscation was found. Operational examples can still delete or overwrite data without explicit confirmation safeguards.

1
Gescannte Dateien
1,058
Analysierte Zeilen
3
Prüfelemente
0
Falschmeldungen ignoriert

Bestätigte Sicherheitsbedenken (2)

Mittel
SKILL.md:698SKILL.md:819-825
Destructive Operations Lack Confirmation Safeguards
The command reference includes a database delete, and the PySpark template uses overwrite mode. The skill does not require confirmation, backups, or dry runs before these actions.
Both destructive patterns are explicit examples, and surrounding guidance directs the agent to deploy and run pipelines. Risk depends on access to live systems.
Niedrig
SKILL.md:802-805
Inline Credential Pattern in JDBC Example
The JDBC example places username and password values directly in pipeline code. Although placeholders, this pattern can encourage users to embed real credentials.
The username and password options are visibly embedded in the example. They are placeholders, so no actual secret exposure is present.

Risikofaktoren

⚙️ Externe Befehle (1)
SKILL.md:89-264
Geprüft von: codex
Audit-Version 1

15. Juli 2026, 15:03

All 51 static findings are false positives caused by Markdown formatting, SQL identifiers, multilingual text, and documentation examples. No prompt injection, hidden executable payload, or obfuscation was found. Operational examples can still delete or overwrite data without explicit confirmation safeguards.

1
Gescannte Dateien
1,058
Analysierte Zeilen
3
Prüfelemente
0
Falschmeldungen ignoriert

Bestätigte Sicherheitsbedenken (2)

Mittel
SKILL.md:698SKILL.md:819-825
Destructive Operations Lack Confirmation Safeguards
The command reference includes a database delete, and the PySpark template uses overwrite mode. The skill does not require confirmation, backups, or dry runs before these actions.
Both destructive patterns are explicit examples, and surrounding guidance directs the agent to deploy and run pipelines. Risk depends on access to live systems.
Niedrig
SKILL.md:802-805
Inline Credential Pattern in JDBC Example
The JDBC example places username and password values directly in pipeline code. Although placeholders, this pattern can encourage users to embed real credentials.
The username and password options are visibly embedded in the example. They are placeholders, so no actual secret exposure is present.

Risikofaktoren

⚙️ Externe Befehle (1)
SKILL.md:89-264
Geprüft von: codex
← Zurück zum Skill