Historial de auditorías

Static analysis reported many external command hits, but review shows these are Markdown inline code spans and fenced examples rather than executable scripts. The real risks are semantic: the skill documents command-line handling of API keys and session tokens, and it stores credentials and OAuth tokens under a hidden home-directory path without verifiable encryption.

This skill contains only documentation files (SKILL.md). No executable code exists. All 71 static findings are false positives triggered by markdown documentation syntax misinterpreted as code patterns.

This skill contains only documentation files (SKILL.md). No executable code exists. All 71 static findings are false positives triggered by markdown documentation syntax misinterpreted as code patterns.

Pure documentation-only skill. No code execution, no file system access, no network calls. SKILL.md contains only command documentation for a provider management system.

Pure documentation-only skill. No code execution, no file system access, no network calls. SKILL.md contains only command documentation for a provider management system.

Pure documentation-only skill. No code execution, no file system access, no network calls. SKILL.md contains only command documentation for a provider management system.