Historial de auditorías

Most static findings are false positives caused by Markdown code fences, TypeScript template literals, local database paths, and documentation URLs. Nine command examples invoke npx agentdb@latest, which can execute an unpinned remote package and therefore retain a medium supply-chain risk. No prompt injection, credential exfiltration, or hidden network behavior was found.

Most static findings are Markdown fences, inline command text, documentation links, or local example paths, not executable code. Contextual risks remain from unpinned AgentDB commands and persistent memory storage without clear privacy guardrails.

The static alerts are false positives from Markdown fences, documentation command examples, placeholder SQLite paths, and reference links. I found no prompt injection, credential exfiltration, hidden execution flow, or malicious data handling in SKILL.md.

Static analysis correctly identified many external command examples and local database paths, but they are presented as documentation for AgentDB usage rather than code that runs automatically. The critical heuristic is dismissed because no prompt injection, credential access, obfuscation, or automatic network exfiltration was found in SKILL.md. Medium risk remains because users are instructed to run npx agentdb@latest and manage persistent memory databases that may contain sensitive conversation data.

All static findings evaluated as false positives. The skill provides documentation for AgentDB persistent memory patterns. Scanner flagged CLI command examples, database file references, and metadata URL as risks, but these are legitimate components of a database documentation skill with no actual code execution or credential access.

AI analysis failed after multiple attempts - MANUAL REVIEW REQUIRED before publishing. This skill cannot be auto-published until reviewed by a human.

AI analysis failed after multiple attempts - MANUAL REVIEW REQUIRED before publishing. This skill cannot be auto-published until reviewed by a human.

Documentation-only skill containing no executable code. Pure markdown documentation describing AgentDB usage patterns. No file system access, network calls, or command execution capabilities.

Documentation-only skill containing no executable code. Pure markdown documentation describing AgentDB usage patterns. No file system access, network calls, or command execution capabilities.

Documentation-only skill containing no executable code. Pure markdown documentation describing AgentDB usage patterns. No file system access, network calls, or command execution capabilities.