Habilidades allra-test-writing Historial de auditorías
📦

Historial de auditorías

allra-test-writing - 6 auditorías

Versión de auditoría 6

Más reciente Riesgo bajo

Jun 28, 2026, 08:13 AM

Static analysis reported many external command and blocker patterns, but review found they are markdown backticks, Java examples, and test documentation. No prompt injection, credential access, network exfiltration, or malicious behavior was found. The skill includes benign Gradle and Maven test command examples, so external command risk is retained as a low-risk publication warning.

1
Archivos escaneados
781
Líneas analizadas
5
hallazgos
codex
Auditado por
Problemas de riesgo bajo (4)
Markdown Backticks Misclassified as Shell Execution
The Ruby or shell backtick alerts point to markdown inline code, markdown code fences, and Java test examples. They do not execute commands or define executable Ruby code.
Weak Cryptography Alert Is a Metadata False Positive
The weak cryptographic algorithm alert points to the frontmatter description. No cryptographic algorithm, hashing function, or security implementation is present at that location.
System Reconnaissance Alerts Are Java Test Method Names
The reconnaissance alerts match words inside Java test examples, such as test method names and repository calls. No commands collect host, user, network, or environment information.
Benign Local Test Command Examples
The skill documents Gradle and Maven test commands for local project validation. These are normal developer workflows, but running project wrappers can execute local project code, so users should use trusted repositories.

Factores de riesgo

⚙️ Comandos externos (2)

Versión de auditoría 5

Seguro

Jan 16, 2026, 03:22 PM

This is a pure documentation skill containing only markdown guidelines for Java/Spring Boot testing standards. The static analyzer flagged 105 'issues' but ALL findings are FALSE POSITIVES. The 'backtick execution' detections are markdown code block delimiters, not Ruby/shell commands. 'C2 keywords' and 'weak crypto' flags are triggered by metadata field names (content_hash, tree_hash) and Java variable names in test examples (execute, trigger, command). No executable code, scripts, or network calls exist. This skill only provides documentation for test writing patterns and is safe for publishing.

2
Archivos escaneados
960
Líneas analizadas
1
hallazgos
claude
Auditado por
No se encontraron problemas de seguridad

Versión de auditoría 4

Seguro

Jan 16, 2026, 03:22 PM

This is a pure documentation skill containing only markdown guidelines for Java/Spring Boot testing standards. The static analyzer flagged 105 'issues' but ALL findings are FALSE POSITIVES. The 'backtick execution' detections are markdown code block delimiters, not Ruby/shell commands. 'C2 keywords' and 'weak crypto' flags are triggered by metadata field names (content_hash, tree_hash) and Java variable names in test examples (execute, trigger, command). No executable code, scripts, or network calls exist. This skill only provides documentation for test writing patterns and is safe for publishing.

2
Archivos escaneados
960
Líneas analizadas
1
hallazgos
claude
Auditado por
No se encontraron problemas de seguridad

Versión de auditoría 3

Seguro

Jan 10, 2026, 10:19 AM

Pure documentation skill containing only markdown guidelines. No executable code, scripts, network calls, or file system access. Safe for publishing.

1
Archivos escaneados
781
Líneas analizadas
0
hallazgos
claude
Auditado por
No se encontraron problemas de seguridad

Versión de auditoría 2

Seguro

Jan 10, 2026, 10:19 AM

Pure documentation skill containing only markdown guidelines. No executable code, scripts, network calls, or file system access. Safe for publishing.

1
Archivos escaneados
781
Líneas analizadas
0
hallazgos
claude
Auditado por
No se encontraron problemas de seguridad

Versión de auditoría 1

Seguro

Jan 10, 2026, 10:19 AM

Pure documentation skill containing only markdown guidelines. No executable code, scripts, network calls, or file system access. Safe for publishing.

1
Archivos escaneados
781
Líneas analizadas
0
hallazgos
claude
Auditado por
No se encontraron problemas de seguridad