Habilidades coding-standards Historial de auditorías
📦

Historial de auditorías

coding-standards - 5 auditorías

Comparación de versiones

Cambios de capacidades y hallazgos entre versiones auditadas, primero las más recientes.

VersiónFechaResultadoElementos de revisiónCambio vs anterior
v5 Más reciente20 jul 2026, 17:15 Sin hallazgos confirmados0Comandos externos
v4 27 jun 2026, 16:35 Sin hallazgos confirmados0 Comandos externos
v3 16 ene 2026, 11:58 Sin hallazgos confirmados0Sin cambios de capacidad
v2 16 ene 2026, 11:58 Sin hallazgos confirmados0Comandos externos
v1 10 ene 2026, 09:08 Sin hallazgos confirmados0Base

27 jun 2026, 16:35

Static analysis reported many external command and weak cryptography patterns, but review found they are false positives from Markdown code fences, inline TypeScript identifiers, and ordinary example text. No executable scripts, network calls, credential access, prompt injection, or malicious intent were found in SKILL.md. The skill is safe to publish as documentation-only coding guidance.

1
Archivos escaneados
436
Líneas analizadas
0
Elementos de revisión
3
Falsos positivos ignorados
Falsos positivos estáticos ignorados (3)

Estas coincidencias estáticas fueron descartadas por la revisión semántica o coincidieron con tokens solo de esquema, por lo que se muestran por transparencia, pero no afectan la puntuación de calidad.

Bajo
False positive external command detections
The external command detections occur inside Markdown code fences and inline TypeScript examples, such as component structure, hooks, imports, and commit-message formatting. They are documentation examples and are not executed by the skill.
The reviewed locations are Markdown examples and headings, not runnable skill code. No shell invocation, dynamic execution, or instruction to run commands is present.
Bajo
False positive weak cryptography detections
The weak cryptography detections are caused by unrelated text fragments in the description and TypeScript examples. No cryptographic API, hash function, encryption routine, or password handling logic appears in the skill.
The flagged lines contain prose or ordinary test/example code, not crypto usage. There is no evidence of MD5, SHA1, DES, or similar weak algorithms being used.
Bajo
False positive reconnaissance detections
The reconnaissance detections map to TypeScript sample code and documentation text, including array find examples and error handling examples. They do not gather system information or inspect a host environment.
The reviewed content is static coding guidance with no operating system commands or environment inspection. No evidence of host reconnaissance was found.
No se registraron hallazgos de seguridad confirmados en esta auditoría completada.
Auditado por: codex

16 ene 2026, 11:58

This skill contains only markdown documentation with TypeScript code examples. All 91 static findings are false positives: hash strings triggered C2/crypto keywords, mathematical formulas were misidentified as cryptographic code, and TypeScript patterns were flagged as system reconnaissance. No executable code, network calls, file system access, or environment variable usage exists.

2
Archivos escaneados
614
Líneas analizadas
1
Elementos de revisión
0
Falsos positivos ignorados
Auditado por: claude

16 ene 2026, 11:58

This skill contains only markdown documentation with TypeScript code examples. All 91 static findings are false positives: hash strings triggered C2/crypto keywords, mathematical formulas were misidentified as cryptographic code, and TypeScript patterns were flagged as system reconnaissance. No executable code, network calls, file system access, or environment variable usage exists.

2
Archivos escaneados
614
Líneas analizadas
1
Elementos de revisión
0
Falsos positivos ignorados
Auditado por: claude

10 ene 2026, 09:08

This skill contains only documentation in markdown format. No executable code, scripts, network calls, filesystem access, or environment variable access. Pure reference documentation for coding standards.

1
Archivos escaneados
436
Líneas analizadas
0
Elementos de revisión
0
Falsos positivos ignorados
No se registraron hallazgos de seguridad confirmados en esta auditoría completada.
Auditado por: claude