Habilidades planning-framework Historial de auditorías
📦

Historial de auditorías

planning-framework - 6 auditorías

Comparación de versiones

Cambios de capacidades y hallazgos entre versiones auditadas, primero las más recientes.

VersiónFechaResultadoElementos de revisiónCambio vs anterior
v6 Más reciente6 jul 2026, 00:40 Sin hallazgos confirmados0Sin cambios de capacidad
v5 6 jul 2026, 00:40 Sin hallazgos confirmados0Comandos externos
v4 27 jun 2026, 16:40 Sin hallazgos confirmados0 Comandos externos
v3 16 ene 2026, 12:08 Sin hallazgos confirmados0Sin cambios de capacidad
v2 16 ene 2026, 12:08 Sin hallazgos confirmados0Comandos externos
v1 10 ene 2026, 09:10 Sin hallazgos confirmados0Base

6 jul 2026, 00:40

All 24 static findings are false positives caused by Markdown inline code, code fences, visible package-management examples, and normal planning prose in SKILL.md. No evidence found for prompt injection, data exfiltration intent, hidden execution, or system reconnaissance.

1
Archivos escaneados
362
Líneas analizadas
1
Elementos de revisión
0
Falsos positivos ignorados
Auditado por: codex

6 jul 2026, 00:40

All 24 static findings are false positives caused by Markdown inline code, code fences, visible package-management examples, and normal planning prose in SKILL.md. No evidence found for prompt injection, data exfiltration intent, hidden execution, or system reconnaissance.

1
Archivos escaneados
362
Líneas analizadas
1
Elementos de revisión
0
Falsos positivos ignorados
Auditado por: codex

27 jun 2026, 16:40

Static analysis reported Ruby or shell backticks, weak cryptography, and system reconnaissance patterns in SKILL.md. Manual review found these are Markdown code examples and ordinary prose, with no executable scripts, network activity, environment access, prompt injection, or data exfiltration behavior.

1
Archivos escaneados
362
Líneas analizadas
0
Elementos de revisión
3
Falsos positivos ignorados
Falsos positivos estáticos ignorados (3)

Estas coincidencias estáticas fueron descartadas por la revisión semántica o coincidieron con tokens solo de esquema, por lo que se muestran por transparencia, pero no afectan la puntuación de calidad.

Bajo
Markdown Backticks Misclassified as Command Execution
Verdict: FALSE_POSITIVE. The reported backticks are Markdown inline code spans, fenced TypeScript examples, or example npm and TypeScript commands inside a planning guide. No evidence found of automatic shell execution, dynamic command construction, or user input passed to a command runner.
The only scanned file is SKILL.md, and the flagged lines are rendered documentation examples. There are no scripts or executable source files that could run these snippets automatically.
Bajo
Weak Cryptography Pattern Misclassified from Description Text
Verdict: FALSE_POSITIVE. The static weak cryptography alerts point to the frontmatter description line. No evidence found of cryptographic functions, hashing APIs, encryption logic, or credential handling in the skill.
Line 3 is plain descriptive metadata for a planning skill. The duplicate static alerts appear to match text fragments rather than real cryptographic usage.
Bajo
System Reconnaissance Pattern Misclassified from Project Lessons
Verdict: FALSE_POSITIVE. Lines 338 and 339 describe project decisions about Redux and chart libraries. No evidence found of host inspection, process listing, filesystem probing, or environment discovery.
The flagged lines are human-readable retrospective notes. They do not contain commands, APIs, or instructions that collect system information.
No se registraron hallazgos de seguridad confirmados en esta auditoría completada.
Auditado por: codex

16 ene 2026, 12:08

This skill is a pure Markdown documentation file containing planning frameworks. No executable code exists in either file. All static findings are false positives: command strings like 'npm uninstall' and 'tsc --noEmit' are documentation examples, not shell execution. No file system access, network calls, environment variables, or external commands are present.

2
Archivos escaneados
542
Líneas analizadas
1
Elementos de revisión
0
Falsos positivos ignorados
Auditado por: claude

16 ene 2026, 12:08

This skill is a pure Markdown documentation file containing planning frameworks. No executable code exists in either file. All static findings are false positives: command strings like 'npm uninstall' and 'tsc --noEmit' are documentation examples, not shell execution. No file system access, network calls, environment variables, or external commands are present.

2
Archivos escaneados
542
Líneas analizadas
1
Elementos de revisión
0
Falsos positivos ignorados
Auditado por: claude

10 ene 2026, 09:10

This skill contains only Markdown documentation with planning frameworks. No executable code, no file system access, no network calls, no environment variable access, and no external command execution. Pure prompt-based knowledge base.

1
Archivos escaneados
362
Líneas analizadas
0
Elementos de revisión
0
Falsos positivos ignorados
No se registraron hallazgos de seguridad confirmados en esta auditoría completada.
Auditado por: claude