Historial de auditorías

All 31 static alerts are false positives caused by documentation, metadata URLs, Markdown formatting, installation paths, and normal Chinese text. One high-severity issue remains: package.json declares an automatic postinstall hook, but the referenced script is absent from the audited files.

No credential exfiltration, malicious network activity, prompt injection, or obfuscated binary payload was found. Most static findings are false positives from documentation, code fences, package metadata, JavaScript template literals, and Chinese-language Markdown. The meaningful risk is that npm postinstall and installer paths can write skill files into hidden agent configuration directories, which should require explicit user consent.

No credential exfiltration, malicious network activity, prompt injection, or obfuscated binary payload was found. Most static findings are false positives from documentation, code fences, package metadata, JavaScript template literals, and Chinese-language Markdown. The meaningful risk is that npm postinstall and installer paths can write skill files into hidden agent configuration directories, which should require explicit user consent.

Static analysis reported many high and critical patterns, but review found most are false positives from markdown examples, documentation URLs, license text, and Chinese-language files. The confirmed risk is the npm postinstall installer, which writes skill files into AI agent configuration directories and uses environment-controlled install scope. No malicious intent, data exfiltration, or prompt injection attempt was found.

PitchCraft is a writing/framework skill. Its only executable artifact is scripts/install.js, a transparent postinstall file copier that uses fs.mkdirSync and fs.copyFileSync to place SKILL.md into the standard agent skill directories under the user's home or project root. No network calls, no credential reads, no obfuscation, no eval. The static analyzer's 255 findings are dominated by false positives: markdown backticks flagged as Ruby/shell execution, Apache-2.0 license text flagged as 'weak cryptographic algorithm' (e.g. 'WITHOUT WARRANTIES'), the project's own GitHub URLs flagged as 'hardcoded URLs', Chinese UTF-8 text flagged as high-entropy binary content, and standard ~ paths flagged as 'hidden file access'. The install script is a legitimate npm postinstall pattern. No confirmed malicious behavior.