Historial de auditorías
dev-tools-skill - 8 auditorías
Comparación de versiones
Cambios de capacidades y hallazgos entre versiones auditadas, primero las más recientes.
| Versión | Fecha | Resultado | Elementos de revisión | Cambio vs anterior |
|---|---|---|---|---|
| v8 Más reciente | 5 jul 2026, 14:42 | Sin hallazgos confirmados | 0 | Sin cambios de capacidad |
| v7 | 5 jul 2026, 14:42 | Sin hallazgos confirmados | 0 | Comandos externos |
| v6 | 29 jun 2026, 23:38 | 2 confirmado | 0 | Comandos externos |
| v5 | 17 ene 2026, 05:39 | Sin hallazgos confirmados | 0 | Sin cambios de capacidad |
| v4 | 17 ene 2026, 05:39 | Sin hallazgos confirmados | 0 | Comandos externos |
| v3 | 10 ene 2026, 14:34 | Sin hallazgos confirmados | 0 | Sin cambios de capacidad |
| v2 | 10 ene 2026, 14:34 | Sin hallazgos confirmados | 0 | Sin cambios de capacidad |
| v1 | 10 ene 2026, 14:34 | Sin hallazgos confirmados | 0 | Base |
5 jul 2026, 14:42
All static findings were false positives caused by Markdown inline code for DevTools MCP tool names or benign debugging guidance. No prompt injection, data exfiltration intent, or malicious automation instructions were found. The skill emphasizes evidence gathering, read-only inspection where possible, and confirmation before destructive actions.
Factores de riesgo
5 jul 2026, 14:42
All static findings were false positives caused by Markdown inline code for DevTools MCP tool names or benign debugging guidance. No prompt injection, data exfiltration intent, or malicious automation instructions were found. The skill emphasizes evidence gathering, read-only inspection where possible, and confirmation before destructive actions.
Factores de riesgo
29 jun 2026, 23:38
Static findings for Ruby or shell backtick execution are false positives caused by Markdown inline code names for Chrome DevTools MCP commands. The weak cryptography and reconnaissance detections are also false positives from ordinary prose. The main residual risk is legitimate browser inspection through evaluate_script and network payload review, which can expose sensitive page data if used carelessly.
Preocupaciones de seguridad confirmadas (2)
Falsos positivos estáticos ignorados (2)
Estas coincidencias estáticas fueron descartadas por la revisión semántica o coincidieron con tokens solo de esquema, por lo que se muestran por transparencia, pero no afectan la puntuación de calidad.
Patrones detectados
17 ene 2026, 05:39
Documentation-only skill containing markdown guidance for Chrome DevTools MCP. No executable code, scripts, network calls, or file system access. All static findings are false positives: YAML field names and JSON hash strings misidentified as cryptographic algorithms; markdown backticks for tool names misidentified as shell execution. This is pure documentation.
Factores de riesgo
⚙️ Comandos externos (50)
17 ene 2026, 05:39
Documentation-only skill containing markdown guidance for Chrome DevTools MCP. No executable code, scripts, network calls, or file system access. All static findings are false positives: YAML field names and JSON hash strings misidentified as cryptographic algorithms; markdown backticks for tool names misidentified as shell execution. This is pure documentation.
Factores de riesgo
⚙️ Comandos externos (50)
10 ene 2026, 14:34
This is a prompt-only skill consisting of markdown documentation files. No executable code, scripts, network calls, file system access, or environment variable reading capabilities. The skill purely provides guidance for using Chrome DevTools MCP tools.
10 ene 2026, 14:34
This is a prompt-only skill consisting of markdown documentation files. No executable code, scripts, network calls, file system access, or environment variable reading capabilities. The skill purely provides guidance for using Chrome DevTools MCP tools.
10 ene 2026, 14:34
This is a prompt-only skill consisting of markdown documentation files. No executable code, scripts, network calls, file system access, or environment variable reading capabilities. The skill purely provides guidance for using Chrome DevTools MCP tools.