Compétences llm-doc-writer Historique des audits
📦

Historique des audits

llm-doc-writer - 7 audits

Version de l’audit 7

Dernier Sûr

Jun 28, 2026, 04:42 AM

Static analysis reported external command, network, weak crypto, and reconnaissance patterns. Manual review found only markdown examples, inline code formatting, and ordinary documentation text, with no executable code or malicious intent.

2
Fichiers analysés
282
Lignes analysées
4
Review items
0
False positives ignored

Confirmed security concerns (4)

Faible
patterns.md:7patterns.md:23patterns.md:27patterns.md:41patterns.md:49patterns.md:58patterns.md:62patterns.md:65patterns.md:71patterns.md:72patterns.md:80patterns.md:89patterns.md:93patterns.md:97patterns.md:98patterns.md:99patterns.md:100patterns.md:108patterns.md:119patterns.md:123patterns.md:126patterns.md:134SKILL.md:20SKILL.md:30SKILL.md:36SKILL.md:48SKILL.md:52SKILL.md:61SKILL.md:62SKILL.md:63SKILL.md:67SKILL.md:73SKILL.md:75SKILL.md:76SKILL.md:82SKILL.md:93SKILL.md:94SKILL.md:95SKILL.md:103SKILL.md:109
False Positive: Markdown Backticks Misread as Shell Execution
The external command detections are markdown fences or inline command examples. No Ruby code, shell execution logic, or user-controlled command invocation was found.
Both scanned files are markdown documentation. The flagged locations are code fences, inline command examples, or formatting markers, not executable Ruby backtick calls.
Faible
patterns.md:12patterns.md:19patterns.md:104SKILL.md:3SKILL.md:38SKILL.md:98
False Positive: Weak Crypto Pattern in Documentation Text
The weak cryptography detections match ordinary words and markdown references. No hashing, encryption, signing, or credential handling implementation was found.
Manual review found no cryptographic code. The lines contain documentation prose, headers, or references such as CLAUDE.md.
Faible
patterns.md:117
False Positive: Network Pattern in Architecture Example
The network detection appears in a prose example about REST APIs between services. No Python HTTP library import, endpoint, or outbound request code was found.
The line is inside a before-and-after documentation example. It describes architecture communication and does not perform network activity.
Faible
patterns.md:139
False Positive: Reconnaissance Pattern in Section Heading
The reconnaissance detection maps to an anti-patterns heading. No host, user, process, environment, or filesystem discovery command was found.
The flagged line is a markdown heading introducing writing anti-patterns. There is no executable system reconnaissance behavior in the file.
Audité par: codex

Version de l’audit 6

Sûr

Jan 21, 2026, 02:49 PM

All 55 static findings are false positives. The scanner misidentified markdown documentation syntax as security issues. Backticks are markdown code fences, not shell execution. RabbitMQ and JWT mentions are technology references, not weak crypto. The skill contains only documentation patterns and has no actual code execution, network calls, or cryptographic operations.

3
Fichiers analysés
926
Lignes analysées
0
Review items
0
False positives ignored
Aucun problème de sécurité trouvé
Audité par: claude

Version de l’audit 5

Risque moyen Audit incomplete

Jan 16, 2026, 03:09 PM

AI analysis failed after multiple attempts - MANUAL REVIEW REQUIRED before publishing. This skill cannot be auto-published until reviewed by a human.

Manual review required

This audit did not complete successfully. The quality score is capped until a successful audit is available.

3
Fichiers analysés
471
Lignes analysées
3
Review items
0
False positives ignored

Facteurs de risque

⚙️ Commandes externes (40)
patterns.md:7-23 patterns.md:23-27 patterns.md:27-41 patterns.md:41-49 patterns.md:49-58 patterns.md:58-62 patterns.md:62-65 patterns.md:65-71 patterns.md:71-72 patterns.md:72-80 patterns.md:80-89 patterns.md:89-93 patterns.md:93-97 patterns.md:97-98 patterns.md:98-99 patterns.md:99-100 patterns.md:100-108 patterns.md:108-119 patterns.md:119-123 patterns.md:123-126 patterns.md:126-134 patterns.md:134-135 SKILL.md:20-30 SKILL.md:30-36 SKILL.md:36-48 SKILL.md:48-52 SKILL.md:52-61 SKILL.md:61-62 SKILL.md:62-63 SKILL.md:63-67 SKILL.md:67-73 SKILL.md:73-75 SKILL.md:75-76 SKILL.md:76-82 SKILL.md:82-93 SKILL.md:93-94 SKILL.md:94-95 SKILL.md:95-103 SKILL.md:103-109 SKILL.md:109-118
🌐 Accès réseau (1)
patterns.md:117

Motifs détectés

Ruby/shell backtick executionPython HTTP librariesWeak cryptographic algorithmSystem reconnaissance
Audité par: claude

Version de l’audit 4

Risque moyen Audit incomplete

Jan 16, 2026, 03:09 PM

AI analysis failed after multiple attempts - MANUAL REVIEW REQUIRED before publishing. This skill cannot be auto-published until reviewed by a human.

Manual review required

This audit did not complete successfully. The quality score is capped until a successful audit is available.

3
Fichiers analysés
471
Lignes analysées
3
Review items
0
False positives ignored

Facteurs de risque

⚙️ Commandes externes (40)
patterns.md:7-23 patterns.md:23-27 patterns.md:27-41 patterns.md:41-49 patterns.md:49-58 patterns.md:58-62 patterns.md:62-65 patterns.md:65-71 patterns.md:71-72 patterns.md:72-80 patterns.md:80-89 patterns.md:89-93 patterns.md:93-97 patterns.md:97-98 patterns.md:98-99 patterns.md:99-100 patterns.md:100-108 patterns.md:108-119 patterns.md:119-123 patterns.md:123-126 patterns.md:126-134 patterns.md:134-135 SKILL.md:20-30 SKILL.md:30-36 SKILL.md:36-48 SKILL.md:48-52 SKILL.md:52-61 SKILL.md:61-62 SKILL.md:62-63 SKILL.md:63-67 SKILL.md:67-73 SKILL.md:73-75 SKILL.md:75-76 SKILL.md:76-82 SKILL.md:82-93 SKILL.md:93-94 SKILL.md:94-95 SKILL.md:95-103 SKILL.md:103-109 SKILL.md:109-118
🌐 Accès réseau (1)
patterns.md:117

Motifs détectés

Ruby/shell backtick executionPython HTTP librariesWeak cryptographic algorithmSystem reconnaissance
Audité par: claude

Version de l’audit 3

Sûr

Jan 10, 2026, 09:55 AM

Pure prompt-based documentation skill with no code execution, filesystem access, network calls, or system modifications. Contains only instructional markdown content with writing guidelines and examples.

2
Fichiers analysés
282
Lignes analysées
0
Review items
0
False positives ignored
Aucun problème de sécurité trouvé
Audité par: claude

Version de l’audit 2

Sûr

Jan 10, 2026, 09:55 AM

Pure prompt-based documentation skill with no code execution, filesystem access, network calls, or system modifications. Contains only instructional markdown content with writing guidelines and examples.

2
Fichiers analysés
282
Lignes analysées
0
Review items
0
False positives ignored
Aucun problème de sécurité trouvé
Audité par: claude

Version de l’audit 1

Sûr

Jan 10, 2026, 09:55 AM

Pure prompt-based documentation skill with no code execution, filesystem access, network calls, or system modifications. Contains only instructional markdown content with writing guidelines and examples.

2
Fichiers analysés
282
Lignes analysées
0
Review items
0
False positives ignored
Aucun problème de sécurité trouvé
Audité par: claude
← Retour à la compétence