Habilidades arrange Historial de auditorías
📦

Historial de auditorías

arrange - 4 auditorías

Comparación de versiones

Cambios de capacidades y hallazgos entre versiones auditadas, primero las más recientes.

VersiónFechaResultadoElementos de revisiónCambio vs anterior
v4 Más reciente6 jul 2026, 19:53 Sin hallazgos confirmados0Sin cambios de capacidad
v3 6 jul 2026, 19:53 Sin hallazgos confirmados0Comandos externos
v2 30 jun 2026, 11:01 Sin hallazgos confirmados0Sin cambios de capacidad
v1 24 mar 2026, 08:23 Sin hallazgos confirmados0Base

6 jul 2026, 19:53

All 13 static findings are false positives caused by Markdown prose and inline CSS examples. No executable commands, reconnaissance behavior, prompt injection, network activity, or data exfiltration intent was found in SKILL.md.

1
Archivos escaneados
124
Líneas analizadas
1
Elementos de revisión
0
Falsos positivos ignorados
Auditado por: codex

6 jul 2026, 19:53

All 13 static findings are false positives caused by Markdown prose and inline CSS examples. No executable commands, reconnaissance behavior, prompt injection, network activity, or data exfiltration intent was found in SKILL.md.

1
Archivos escaneados
124
Líneas analizadas
1
Elementos de revisión
0
Falsos positivos ignorados
Auditado por: codex

30 jun 2026, 11:01

The static findings are false positives from Markdown design guidance, not executable code. Inline CSS examples, layout terminology, and words such as weak were misclassified as shell execution, reconnaissance, and cryptographic risk.

1
Archivos escaneados
124
Líneas analizadas
0
Elementos de revisión
3
Falsos positivos ignorados
Falsos positivos estáticos ignorados (3)

Estas coincidencias estáticas fueron descartadas por la revisión semántica o coincidieron con tokens solo de esquema, por lo que se muestran por transparencia, pero no afectan la puntuación de calidad.

Bajo
False Positive: Markdown Code Spans Misread as External Commands
The reported Ruby backtick locations are inline Markdown examples for CSS tokens, gap, clamp, flex-wrap, repeat, and grid-template-areas. No evidence found of shell execution or command construction.
The exact lines contain Markdown formatting and CSS layout examples only. There is no Ruby file, script block, subprocess call, or user-controlled command path.
Bajo
False Positive: Design Wording Misread as Weak Cryptography
The high-severity cryptography alerts match ordinary design prose, including weak hierarchy and layout guidance. No evidence found of hashing, encryption, cipher selection, or credential handling.
The flagged lines are natural-language UI design instructions. None include cryptographic APIs, algorithms, encoded data, secrets, or security-sensitive processing.
Bajo
False Positive: Layout Terms Misread as System Reconnaissance
The reconnaissance alerts match interface layout terms such as grid, system, and structure. No evidence found of host inspection, file listing, environment probing, or network discovery.
The context is UI layout assessment and responsive design guidance. There are no commands or instructions for collecting system, network, account, or environment information.
No se registraron hallazgos de seguridad confirmados en esta auditoría completada.
Auditado por: codex

24 mar 2026, 08:23

Static analysis flagged 29 potential issues but all are false positives. The skill file contains only markdown documentation with CSS code snippets for design guidance. No executable code, external commands, or security risks present. All findings result from pattern matching on documentation text (CSS property names, design terminology) rather than actual code execution.

1
Archivos escaneados
124
Líneas analizadas
0
Elementos de revisión
0
Falsos positivos ignorados
No se registraron hallazgos de seguridad confirmados en esta auditoría completada.
Auditado por: claude