Habilidades llm-doc-writer Historial de auditorías
📦

Historial de auditorías

llm-doc-writer - 7 auditorías

Versión de auditoría 7

Más reciente Seguro

Jun 28, 2026, 04:42 AM

Static analysis reported external command, network, weak crypto, and reconnaissance patterns. Manual review found only markdown examples, inline code formatting, and ordinary documentation text, with no executable code or malicious intent.

2
Archivos escaneados
282
Líneas analizadas
4
Review items
0
False positives ignored

Confirmed security concerns (4)

Bajo
patterns.md:7patterns.md:23patterns.md:27patterns.md:41patterns.md:49patterns.md:58patterns.md:62patterns.md:65patterns.md:71patterns.md:72patterns.md:80patterns.md:89patterns.md:93patterns.md:97patterns.md:98patterns.md:99patterns.md:100patterns.md:108patterns.md:119patterns.md:123patterns.md:126patterns.md:134SKILL.md:20SKILL.md:30SKILL.md:36SKILL.md:48SKILL.md:52SKILL.md:61SKILL.md:62SKILL.md:63SKILL.md:67SKILL.md:73SKILL.md:75SKILL.md:76SKILL.md:82SKILL.md:93SKILL.md:94SKILL.md:95SKILL.md:103SKILL.md:109
False Positive: Markdown Backticks Misread as Shell Execution
The external command detections are markdown fences or inline command examples. No Ruby code, shell execution logic, or user-controlled command invocation was found.
Both scanned files are markdown documentation. The flagged locations are code fences, inline command examples, or formatting markers, not executable Ruby backtick calls.
Bajo
patterns.md:12patterns.md:19patterns.md:104SKILL.md:3SKILL.md:38SKILL.md:98
False Positive: Weak Crypto Pattern in Documentation Text
The weak cryptography detections match ordinary words and markdown references. No hashing, encryption, signing, or credential handling implementation was found.
Manual review found no cryptographic code. The lines contain documentation prose, headers, or references such as CLAUDE.md.
Bajo
patterns.md:117
False Positive: Network Pattern in Architecture Example
The network detection appears in a prose example about REST APIs between services. No Python HTTP library import, endpoint, or outbound request code was found.
The line is inside a before-and-after documentation example. It describes architecture communication and does not perform network activity.
Bajo
patterns.md:139
False Positive: Reconnaissance Pattern in Section Heading
The reconnaissance detection maps to an anti-patterns heading. No host, user, process, environment, or filesystem discovery command was found.
The flagged line is a markdown heading introducing writing anti-patterns. There is no executable system reconnaissance behavior in the file.
Auditado por: codex

Versión de auditoría 6

Seguro

Jan 21, 2026, 02:49 PM

All 55 static findings are false positives. The scanner misidentified markdown documentation syntax as security issues. Backticks are markdown code fences, not shell execution. RabbitMQ and JWT mentions are technology references, not weak crypto. The skill contains only documentation patterns and has no actual code execution, network calls, or cryptographic operations.

3
Archivos escaneados
926
Líneas analizadas
0
Review items
0
False positives ignored
No se encontraron problemas de seguridad
Auditado por: claude

Versión de auditoría 5

Riesgo medio Audit incomplete

Jan 16, 2026, 03:09 PM

AI analysis failed after multiple attempts - MANUAL REVIEW REQUIRED before publishing. This skill cannot be auto-published until reviewed by a human.

Manual review required

This audit did not complete successfully. The quality score is capped until a successful audit is available.

3
Archivos escaneados
471
Líneas analizadas
3
Review items
0
False positives ignored

Factores de riesgo

⚙️ Comandos externos (40)
patterns.md:7-23 patterns.md:23-27 patterns.md:27-41 patterns.md:41-49 patterns.md:49-58 patterns.md:58-62 patterns.md:62-65 patterns.md:65-71 patterns.md:71-72 patterns.md:72-80 patterns.md:80-89 patterns.md:89-93 patterns.md:93-97 patterns.md:97-98 patterns.md:98-99 patterns.md:99-100 patterns.md:100-108 patterns.md:108-119 patterns.md:119-123 patterns.md:123-126 patterns.md:126-134 patterns.md:134-135 SKILL.md:20-30 SKILL.md:30-36 SKILL.md:36-48 SKILL.md:48-52 SKILL.md:52-61 SKILL.md:61-62 SKILL.md:62-63 SKILL.md:63-67 SKILL.md:67-73 SKILL.md:73-75 SKILL.md:75-76 SKILL.md:76-82 SKILL.md:82-93 SKILL.md:93-94 SKILL.md:94-95 SKILL.md:95-103 SKILL.md:103-109 SKILL.md:109-118
🌐 Acceso a red (1)
patterns.md:117

Patrones detectados

Ruby/shell backtick executionPython HTTP librariesWeak cryptographic algorithmSystem reconnaissance
Auditado por: claude

Versión de auditoría 4

Riesgo medio Audit incomplete

Jan 16, 2026, 03:09 PM

AI analysis failed after multiple attempts - MANUAL REVIEW REQUIRED before publishing. This skill cannot be auto-published until reviewed by a human.

Manual review required

This audit did not complete successfully. The quality score is capped until a successful audit is available.

3
Archivos escaneados
471
Líneas analizadas
3
Review items
0
False positives ignored

Factores de riesgo

⚙️ Comandos externos (40)
patterns.md:7-23 patterns.md:23-27 patterns.md:27-41 patterns.md:41-49 patterns.md:49-58 patterns.md:58-62 patterns.md:62-65 patterns.md:65-71 patterns.md:71-72 patterns.md:72-80 patterns.md:80-89 patterns.md:89-93 patterns.md:93-97 patterns.md:97-98 patterns.md:98-99 patterns.md:99-100 patterns.md:100-108 patterns.md:108-119 patterns.md:119-123 patterns.md:123-126 patterns.md:126-134 patterns.md:134-135 SKILL.md:20-30 SKILL.md:30-36 SKILL.md:36-48 SKILL.md:48-52 SKILL.md:52-61 SKILL.md:61-62 SKILL.md:62-63 SKILL.md:63-67 SKILL.md:67-73 SKILL.md:73-75 SKILL.md:75-76 SKILL.md:76-82 SKILL.md:82-93 SKILL.md:93-94 SKILL.md:94-95 SKILL.md:95-103 SKILL.md:103-109 SKILL.md:109-118
🌐 Acceso a red (1)
patterns.md:117

Patrones detectados

Ruby/shell backtick executionPython HTTP librariesWeak cryptographic algorithmSystem reconnaissance
Auditado por: claude

Versión de auditoría 3

Seguro

Jan 10, 2026, 09:55 AM

Pure prompt-based documentation skill with no code execution, filesystem access, network calls, or system modifications. Contains only instructional markdown content with writing guidelines and examples.

2
Archivos escaneados
282
Líneas analizadas
0
Review items
0
False positives ignored
No se encontraron problemas de seguridad
Auditado por: claude

Versión de auditoría 2

Seguro

Jan 10, 2026, 09:55 AM

Pure prompt-based documentation skill with no code execution, filesystem access, network calls, or system modifications. Contains only instructional markdown content with writing guidelines and examples.

2
Archivos escaneados
282
Líneas analizadas
0
Review items
0
False positives ignored
No se encontraron problemas de seguridad
Auditado por: claude

Versión de auditoría 1

Seguro

Jan 10, 2026, 09:55 AM

Pure prompt-based documentation skill with no code execution, filesystem access, network calls, or system modifications. Contains only instructional markdown content with writing guidelines and examples.

2
Archivos escaneados
282
Líneas analizadas
0
Review items
0
False positives ignored
No se encontraron problemas de seguridad
Auditado por: claude
← Volver a la habilidad