Audit History

Most static findings are markdown examples or safe command documentation, including false positives from fenced code blocks. Confirmed risks are limited to destructive or broad file-changing shell workflows, and no prompt injection or data exfiltration evidence was found.

Most static findings are markdown examples or safe command documentation, including false positives from fenced code blocks. Confirmed risks are limited to destructive or broad file-changing shell workflows, and no prompt injection or data exfiltration evidence was found.

The skill is documentation for local fd, ripgrep, and fzf workflows, with no prompt injection text or network behavior found. Most Markdown backtick detections are false positives, but several advanced examples perform bulk replacement or destructive file deletion. Users should treat advanced commands as manual examples and review selections before execution.

Static analysis flagged many command patterns because this skill is Bash-focused documentation for fd, ripgrep, and fzf. The weak-crypto and dynamic-import alerts are false positives, but the skill does include legitimate examples that can modify or delete files when executed. No evidence found for malware, credential access, network exfiltration, obfuscation, or prompt injection.

Pure documentation skill containing only markdown files. No executable code, no MCP definitions, no network calls, no file system access, and no command execution. The skill provides informational content about using fd, ripgrep, and fzf command-line tools. All static findings are FALSE POSITIVES - the scanner misinterpreted markdown code block examples as executable commands.

Pure documentation skill containing only markdown files. No executable code, no MCP definitions, no network calls, no file system access, and no command execution. The skill provides informational content about using fd, ripgrep, and fzf command-line tools. All static findings are FALSE POSITIVES - the scanner misinterpreted markdown code block examples as executable commands.

Pure documentation skill containing only markdown files. No executable code, no MCP definitions, no network calls, no file system access, and no command execution. The skill provides informational content about using fd, ripgrep, and fzf command-line tools.