감사 이력
helm-chart-architect - 6 감사
버전 비교
감사된 버전 간의 기능 및 발견 항목 변화, 최신순.
5 jul 2026, 15:19
The static findings are false positives caused by Markdown inline code, YAML fences, public Helm repository examples, and design questions. No prompt injection, data exfiltration intent, or executable automation was found in SKILL.md.
위험 요인
⚙️ 외부 명령어 (16)
🌐 네트워크 접근 (2)
5 jul 2026, 15:19
The static findings are false positives caused by Markdown inline code, YAML fences, public Helm repository examples, and design questions. No prompt injection, data exfiltration intent, or executable automation was found in SKILL.md.
위험 요인
⚙️ 외부 명령어 (16)
🌐 네트워크 접근 (2)
27 jun 2026, 18:57
Static analysis reported command execution, weak cryptography, system reconnaissance, and network indicators, but review found Markdown guidance and YAML examples rather than executable behavior. No malicious intent, prompt injection, credential access, or data exfiltration evidence was found. The remaining concern is low because the skill references third-party Helm chart repositories as examples.
정적 오탐 무시됨 (4)
이러한 정적 일치는 의미론적 검토에서 기각되었거나 스키마 전용 토큰과 일치했으므로 투명성을 위해 표시되지만 품질 점수에는 영향을 주지 않습니다.
16 ene 2026, 12:37
This is a pure documentation/markdown skill with no executable code. All 88 static findings are FALSE POSITIVES: backticks in markdown code blocks were misinterpreted as Ruby/shell execution, legitimate Helm repository URLs in examples were flagged as hardcoded URLs, and random strings in JSON content were misidentified as weak cryptographic algorithms. The skill provides only architectural guidance and contains no scripts, network calls, or filesystem operations.
위험 요인
🌐 네트워크 접근 (2)
⚙️ 외부 명령어 (19)
16 ene 2026, 12:37
This is a pure documentation/markdown skill with no executable code. All 88 static findings are FALSE POSITIVES: backticks in markdown code blocks were misinterpreted as Ruby/shell execution, legitimate Helm repository URLs in examples were flagged as hardcoded URLs, and random strings in JSON content were misidentified as weak cryptographic algorithms. The skill provides only architectural guidance and contains no scripts, network calls, or filesystem operations.
위험 요인
🌐 네트워크 접근 (2)
⚙️ 외부 명령어 (19)
10 ene 2026, 09:34
Pure prompt-based skill containing only markdown documentation. No executable code, scripts, network calls, or filesystem access beyond reading its own SKILL.md file. Completely safe for users.