Historial de auditorías
allra-test-writing - 6 auditorías
Versión de auditoría 6
Más reciente Riesgo bajoJun 28, 2026, 08:13 AM
Static analysis reported many external command and blocker patterns, but review found they are markdown backticks, Java examples, and test documentation. No prompt injection, credential access, network exfiltration, or malicious behavior was found. The skill includes benign Gradle and Maven test command examples, so external command risk is retained as a low-risk publication warning.
Problemas de riesgo bajo (4)
Factores de riesgo
⚙️ Comandos externos (2)
Versión de auditoría 5
SeguroJan 16, 2026, 03:22 PM
This is a pure documentation skill containing only markdown guidelines for Java/Spring Boot testing standards. The static analyzer flagged 105 'issues' but ALL findings are FALSE POSITIVES. The 'backtick execution' detections are markdown code block delimiters, not Ruby/shell commands. 'C2 keywords' and 'weak crypto' flags are triggered by metadata field names (content_hash, tree_hash) and Java variable names in test examples (execute, trigger, command). No executable code, scripts, or network calls exist. This skill only provides documentation for test writing patterns and is safe for publishing.
Factores de riesgo
⚙️ Comandos externos (72)
Versión de auditoría 4
SeguroJan 16, 2026, 03:22 PM
This is a pure documentation skill containing only markdown guidelines for Java/Spring Boot testing standards. The static analyzer flagged 105 'issues' but ALL findings are FALSE POSITIVES. The 'backtick execution' detections are markdown code block delimiters, not Ruby/shell commands. 'C2 keywords' and 'weak crypto' flags are triggered by metadata field names (content_hash, tree_hash) and Java variable names in test examples (execute, trigger, command). No executable code, scripts, or network calls exist. This skill only provides documentation for test writing patterns and is safe for publishing.
Factores de riesgo
⚙️ Comandos externos (72)
Versión de auditoría 3
SeguroJan 10, 2026, 10:19 AM
Pure documentation skill containing only markdown guidelines. No executable code, scripts, network calls, or file system access. Safe for publishing.
Versión de auditoría 2
SeguroJan 10, 2026, 10:19 AM
Pure documentation skill containing only markdown guidelines. No executable code, scripts, network calls, or file system access. Safe for publishing.
Versión de auditoría 1
SeguroJan 10, 2026, 10:19 AM
Pure documentation skill containing only markdown guidelines. No executable code, scripts, network calls, or file system access. Safe for publishing.