감사 이력

The skill contains legitimate instructions to run npx commands from SKILL.md, including package execution and Playwright setup. Several static hits are markdown code fences or inline file names and are false positives for Ruby backtick execution. No prompt injection or malicious data exfiltration intent was found in the reviewed files.

The skill contains legitimate instructions to run npx commands from SKILL.md, including package execution and Playwright setup. Several static hits are markdown code fences or inline file names and are false positives for Ruby backtick execution. No prompt injection or malicious data exfiltration intent was found in the reviewed files.

The real risks are limited to intentional npx commands used to install Chromium and run the design-system extractor against public URLs. Most static hits are Markdown fences or output path references, and no prompt injection or malicious intent was found in the reviewed files.

The skill intentionally runs external npx commands, including Playwright browser setup and the extract-design-system CLI. Most static findings are markdown backtick false positives, but the actual command instructions create normal supply-chain and untrusted-URL risks.

The real security concern is that the skill instructs agents to run external npx commands, including commands with a user-supplied URL argument. The remaining static hits are markdown fences, workflow prose, or generated output path references. I found no prompt-injection attempt or malicious intent in SKILL.md.

Three static findings are confirmed because the skill instructs agents to run npx and Playwright commands. The remaining detections are Markdown fences or output path references, not executable behavior. No prompt injection or data exfiltration intent was found.

Three static findings are confirmed because the skill instructs agents to run npx and Playwright commands. The remaining detections are Markdown fences or output path references, not executable behavior. No prompt injection or data exfiltration intent was found.

Static analysis detected many command and weak-crypto patterns, but review found no prompt injection, malicious intent, network exfiltration, or real cryptographic code. The external-command findings are valid because the skill tells agents to run npx-based tools, so publication is acceptable only with a warning about user approval and package trust.

AI analysis failed after multiple attempts - MANUAL REVIEW REQUIRED before publishing. This skill cannot be auto-published until reviewed by a human.