Historial de auditorías
knowledge-base - 5 auditorías
Versión de auditoría 5
Más reciente Riesgo bajoJan 17, 2026, 04:41 AM
This is a legitimate knowledge base documentation tool. All static findings are false positives: child_process exec is imported but never used; backticks are JavaScript template literals for documentation generation, not shell execution; path traversal warnings are mitigated by explicit sanitization (lines 217, 225); hidden files are explicitly skipped (lines 149, 194, 288, 357, 423, 473); all operations scoped to project-local docs/knowledge directory with no network calls or credential access.
Factores de riesgo
📁 Acceso al sistema de archivos (4)
Versión de auditoría 4
Riesgo bajoJan 17, 2026, 04:41 AM
This is a legitimate knowledge base documentation tool. All static findings are false positives: child_process exec is imported but never used; backticks are JavaScript template literals for documentation generation, not shell execution; path traversal warnings are mitigated by explicit sanitization (lines 217, 225); hidden files are explicitly skipped (lines 149, 194, 288, 357, 423, 473); all operations scoped to project-local docs/knowledge directory with no network calls or credential access.
Factores de riesgo
📁 Acceso al sistema de archivos (4)
Versión de auditoría 3
Riesgo bajoJan 10, 2026, 02:27 PM
This is a legitimate knowledge base management tool with filesystem operations scoped to the project-local docs/knowledge directory. Imports exec from child_process but never uses it. No network calls, no credential access, and behavior matches stated purpose.
Factores de riesgo
📁 Acceso al sistema de archivos (4)
Versión de auditoría 2
Riesgo bajoJan 10, 2026, 02:27 PM
This is a legitimate knowledge base management tool with filesystem operations scoped to the project-local docs/knowledge directory. Imports exec from child_process but never uses it. No network calls, no credential access, and behavior matches stated purpose.
Factores de riesgo
📁 Acceso al sistema de archivos (4)
Versión de auditoría 1
Riesgo bajoJan 10, 2026, 02:27 PM
This is a legitimate knowledge base management tool with filesystem operations scoped to the project-local docs/knowledge directory. Imports exec from child_process but never uses it. No network calls, no credential access, and behavior matches stated purpose.