Historique des audits

Static analysis flagged many shell-command patterns and several weak-crypto patterns. The weak-crypto detections are false positives, and the network finding is only a project link, but the skill does instruct agents to run bd, bv, and git commands that can alter local and remote state. No prompt injection, credential access, obfuscation, or data exfiltration intent was found in SKILL.md.

Pure documentation skill containing only markdown guidance for using beads/bv CLI tools. No executable code, no network calls, no file system access, no command execution. All 61 static findings are false positives from misinterpreting markdown command examples as executable backtick syntax.

Pure documentation skill containing only markdown guidance for using beads/bv CLI tools. No executable code, no network calls, no file system access, no command execution. All 61 static findings are false positives from misinterpreting markdown command examples as executable backtick syntax.

Pure documentation skill containing only markdown guidance for using beads/bv CLI tools. No executable code, no network calls, no file system access, no command execution. Risk level is safe.

Pure documentation skill containing only markdown guidance for using beads/bv CLI tools. No executable code, no network calls, no file system access, no command execution. Risk level is safe.

Pure documentation skill containing only markdown guidance for using beads/bv CLI tools. No executable code, no network calls, no file system access, no command execution. Risk level is safe.