Historial de auditorías
coding-standards - 5 auditorías
Comparación de versiones
Cambios de capacidades y hallazgos entre versiones auditadas, primero las más recientes.
| Versión | Fecha | Resultado | Elementos de revisión | Cambio vs anterior |
|---|---|---|---|---|
| v5 Más reciente | 20 jul 2026, 17:15 | Sin hallazgos confirmados | 0 | Comandos externos |
| v4 | 27 jun 2026, 16:35 | Sin hallazgos confirmados | 0 | Comandos externos |
| v3 | 16 ene 2026, 11:58 | Sin hallazgos confirmados | 0 | Sin cambios de capacidad |
| v2 | 16 ene 2026, 11:58 | Sin hallazgos confirmados | 0 | Comandos externos |
| v1 | 10 ene 2026, 09:08 | Sin hallazgos confirmados | 0 | Base |
20 jul 2026, 17:15
All 62 static findings are false positives. Markdown code delimiters were misidentified as shell backticks, and ordinary TypeScript find calls and documentation were misidentified as reconnaissance. No executable commands, data exfiltration, prompt injection, or malicious intent were found in SKILL.md.
Factores de riesgo
⚙️ Comandos externos (50)
27 jun 2026, 16:35
Static analysis reported many external command and weak cryptography patterns, but review found they are false positives from Markdown code fences, inline TypeScript identifiers, and ordinary example text. No executable scripts, network calls, credential access, prompt injection, or malicious intent were found in SKILL.md. The skill is safe to publish as documentation-only coding guidance.
Falsos positivos estáticos ignorados (3)
Estas coincidencias estáticas fueron descartadas por la revisión semántica o coincidieron con tokens solo de esquema, por lo que se muestran por transparencia, pero no afectan la puntuación de calidad.
16 ene 2026, 11:58
This skill contains only markdown documentation with TypeScript code examples. All 91 static findings are false positives: hash strings triggered C2/crypto keywords, mathematical formulas were misidentified as cryptographic code, and TypeScript patterns were flagged as system reconnaissance. No executable code, network calls, file system access, or environment variable usage exists.
Factores de riesgo
⚙️ Comandos externos (63)
16 ene 2026, 11:58
This skill contains only markdown documentation with TypeScript code examples. All 91 static findings are false positives: hash strings triggered C2/crypto keywords, mathematical formulas were misidentified as cryptographic code, and TypeScript patterns were flagged as system reconnaissance. No executable code, network calls, file system access, or environment variable usage exists.
Factores de riesgo
⚙️ Comandos externos (63)
10 ene 2026, 09:08
This skill contains only documentation in markdown format. No executable code, scripts, network calls, filesystem access, or environment variable access. Pure reference documentation for coding standards.