📦

Historique des audits

testing-strategy-builder - 6 audits

Version de l’audit 6

Dernier Risque faible

Jun 28, 2026, 10:37 AM

Static analysis flagged many shell, network, filesystem, and weak-crypto patterns, but reviewed evidence shows they are Markdown examples, templates, and testing guidance rather than executable skill logic. No prompt-injection language, data exfiltration intent, or malicious automation was found in the reviewed files. The skill is suitable for publication with low risk because users may copy commands or sample tests into their own projects.

5
Fichiers analysés
1,675
Lignes analysées
6
résultats
codex
Audité par
Problèmes à risque faible (3)
External Command Patterns Are Documentation Examples
Verdict: FALSE_POSITIVE. The flagged command patterns appear in Markdown installation commands, verification commands, CI examples, and code fences. They are not executed by the skill and do not include user-controlled command construction.
Network Patterns Are Sample Test Requests
Verdict: FALSE_POSITIVE. The HTTP client and URL findings are example API tests and a k6 load-test sample. The skill does not send data externally or configure a real destination for exfiltration.
Filesystem And Weak-Crypto Alerts Lack Risk Context
Verdict: FALSE_POSITIVE. The path traversal finding is a Jest mock import in a code example, and weak-crypto alerts occur at general testing text or sample data locations. No filesystem access routine or cryptographic implementation was found at the cited locations.

Version de l’audit 5

Sûr

Jan 16, 2026, 05:09 PM

Pure documentation skill containing only markdown files, code examples, and templates. No executable scripts, no network calls, no file system access beyond its own resources, and no environment variable access. The static scanner incorrectly flagged documentation examples showing testing tool commands (e.g., 'npm install jest') as backtick execution, and security testing references (e.g., discussing JWT, SQL injection testing) as cryptographic algorithm patterns. A prior Claude audit confirmed this skill contains only testing guidance and best practices.

6
Fichiers analysés
1,897
Lignes analysées
3
résultats
claude
Audité par
Aucun problème de sécurité trouvé

Facteurs de risque

⚙️ Commandes externes (114)
checklists/test-coverage-checklist.md:29 checklists/test-coverage-checklist.md:61-68 checklists/test-coverage-checklist.md:68-106 checklists/test-coverage-checklist.md:106-114 checklists/test-coverage-checklist.md:114-140 checklists/test-coverage-checklist.md:140-152 checklists/test-coverage-checklist.md:152-313 references/code-examples.md:9-40 references/code-examples.md:40-44 references/code-examples.md:44-60 references/code-examples.md:60-64 references/code-examples.md:64-79 references/code-examples.md:79-87 references/code-examples.md:87-124 references/code-examples.md:124-132 references/code-examples.md:132-158 references/code-examples.md:158-166 references/code-examples.md:166-192 references/code-examples.md:192-200 references/code-examples.md:200-217 references/code-examples.md:217-221 references/code-examples.md:221-244 references/code-examples.md:244-252 references/code-examples.md:252-277 references/code-examples.md:277-283 references/code-examples.md:283-292 references/code-examples.md:292-298 references/code-examples.md:298-308 references/code-examples.md:308-313 references/code-examples.md:313-319 references/code-examples.md:319-341 SKILL.md:25 SKILL.md:26 SKILL.md:27 SKILL.md:28 SKILL.md:36 SKILL.md:37 SKILL.md:40 SKILL.md:44 SKILL.md:45 SKILL.md:48 SKILL.md:50 SKILL.md:54 SKILL.md:55 SKILL.md:58 SKILL.md:59 SKILL.md:62 SKILL.md:63 SKILL.md:67 SKILL.md:68 SKILL.md:71 SKILL.md:72 SKILL.md:75-89 SKILL.md:89-99 SKILL.md:99-109 SKILL.md:109-158 SKILL.md:158-171 SKILL.md:171-184 SKILL.md:184-197 SKILL.md:197-229 SKILL.md:229-233 SKILL.md:233-235 SKILL.md:235-245 SKILL.md:245-258 SKILL.md:258-267 SKILL.md:267-283 SKILL.md:283-295 SKILL.md:295-304 SKILL.md:304-330 SKILL.md:330-394 SKILL.md:394-400 SKILL.md:400-403 SKILL.md:403-410 SKILL.md:410-413 SKILL.md:413-421 SKILL.md:421-424 SKILL.md:424-434 SKILL.md:434-469 SKILL.md:469-478 templates/test-case-template.md:51 templates/test-case-template.md:57 templates/test-case-template.md:59 templates/test-case-template.md:67 templates/test-case-template.md:68 templates/test-case-template.md:79 templates/test-case-template.md:80 templates/test-case-template.md:81 templates/test-case-template.md:83 templates/test-case-template.md:85 templates/test-case-template.md:103 templates/test-case-template.md:105 templates/test-case-template.md:108 templates/test-case-template.md:109 templates/test-case-template.md:110 templates/test-case-template.md:111 templates/test-case-template.md:122-158 templates/test-plan-template.md:110 templates/test-plan-template.md:111 templates/test-plan-template.md:140 templates/test-plan-template.md:141 templates/test-plan-template.md:142 templates/test-plan-template.md:143 templates/test-plan-template.md:144 templates/test-plan-template.md:145 templates/test-plan-template.md:150 templates/test-plan-template.md:151 templates/test-plan-template.md:199 templates/test-plan-template.md:199 templates/test-plan-template.md:199 templates/test-plan-template.md:199 templates/test-plan-template.md:199 templates/test-plan-template.md:199 templates/test-plan-template.md:207 templates/test-plan-template.md:208
🌐 Accès réseau (4)
📁 Accès au système de fichiers (1)

Version de l’audit 4

Sûr

Jan 16, 2026, 05:09 PM

Pure documentation skill containing only markdown files, code examples, and templates. No executable scripts, no network calls, no file system access beyond its own resources, and no environment variable access. The static scanner incorrectly flagged documentation examples showing testing tool commands (e.g., 'npm install jest') as backtick execution, and security testing references (e.g., discussing JWT, SQL injection testing) as cryptographic algorithm patterns. A prior Claude audit confirmed this skill contains only testing guidance and best practices.

6
Fichiers analysés
1,897
Lignes analysées
3
résultats
claude
Audité par
Aucun problème de sécurité trouvé

Facteurs de risque

⚙️ Commandes externes (114)
checklists/test-coverage-checklist.md:29 checklists/test-coverage-checklist.md:61-68 checklists/test-coverage-checklist.md:68-106 checklists/test-coverage-checklist.md:106-114 checklists/test-coverage-checklist.md:114-140 checklists/test-coverage-checklist.md:140-152 checklists/test-coverage-checklist.md:152-313 references/code-examples.md:9-40 references/code-examples.md:40-44 references/code-examples.md:44-60 references/code-examples.md:60-64 references/code-examples.md:64-79 references/code-examples.md:79-87 references/code-examples.md:87-124 references/code-examples.md:124-132 references/code-examples.md:132-158 references/code-examples.md:158-166 references/code-examples.md:166-192 references/code-examples.md:192-200 references/code-examples.md:200-217 references/code-examples.md:217-221 references/code-examples.md:221-244 references/code-examples.md:244-252 references/code-examples.md:252-277 references/code-examples.md:277-283 references/code-examples.md:283-292 references/code-examples.md:292-298 references/code-examples.md:298-308 references/code-examples.md:308-313 references/code-examples.md:313-319 references/code-examples.md:319-341 SKILL.md:25 SKILL.md:26 SKILL.md:27 SKILL.md:28 SKILL.md:36 SKILL.md:37 SKILL.md:40 SKILL.md:44 SKILL.md:45 SKILL.md:48 SKILL.md:50 SKILL.md:54 SKILL.md:55 SKILL.md:58 SKILL.md:59 SKILL.md:62 SKILL.md:63 SKILL.md:67 SKILL.md:68 SKILL.md:71 SKILL.md:72 SKILL.md:75-89 SKILL.md:89-99 SKILL.md:99-109 SKILL.md:109-158 SKILL.md:158-171 SKILL.md:171-184 SKILL.md:184-197 SKILL.md:197-229 SKILL.md:229-233 SKILL.md:233-235 SKILL.md:235-245 SKILL.md:245-258 SKILL.md:258-267 SKILL.md:267-283 SKILL.md:283-295 SKILL.md:295-304 SKILL.md:304-330 SKILL.md:330-394 SKILL.md:394-400 SKILL.md:400-403 SKILL.md:403-410 SKILL.md:410-413 SKILL.md:413-421 SKILL.md:421-424 SKILL.md:424-434 SKILL.md:434-469 SKILL.md:469-478 templates/test-case-template.md:51 templates/test-case-template.md:57 templates/test-case-template.md:59 templates/test-case-template.md:67 templates/test-case-template.md:68 templates/test-case-template.md:79 templates/test-case-template.md:80 templates/test-case-template.md:81 templates/test-case-template.md:83 templates/test-case-template.md:85 templates/test-case-template.md:103 templates/test-case-template.md:105 templates/test-case-template.md:108 templates/test-case-template.md:109 templates/test-case-template.md:110 templates/test-case-template.md:111 templates/test-case-template.md:122-158 templates/test-plan-template.md:110 templates/test-plan-template.md:111 templates/test-plan-template.md:140 templates/test-plan-template.md:141 templates/test-plan-template.md:142 templates/test-plan-template.md:143 templates/test-plan-template.md:144 templates/test-plan-template.md:145 templates/test-plan-template.md:150 templates/test-plan-template.md:151 templates/test-plan-template.md:199 templates/test-plan-template.md:199 templates/test-plan-template.md:199 templates/test-plan-template.md:199 templates/test-plan-template.md:199 templates/test-plan-template.md:199 templates/test-plan-template.md:207 templates/test-plan-template.md:208
🌐 Accès réseau (4)
📁 Accès au système de fichiers (1)

Version de l’audit 3

Sûr

Jan 10, 2026, 10:53 AM

Pure documentation skill containing only markdown files, code examples, and templates. No executable scripts, no network calls, no file system access beyond its own resources, and no environment variable access. Contains only testing guidance and best practices.

5
Fichiers analysés
1,337
Lignes analysées
0
résultats
claude
Audité par
Aucun problème de sécurité trouvé

Version de l’audit 2

Sûr

Jan 10, 2026, 10:53 AM

Pure documentation skill containing only markdown files, code examples, and templates. No executable scripts, no network calls, no file system access beyond its own resources, and no environment variable access. Contains only testing guidance and best practices.

5
Fichiers analysés
1,337
Lignes analysées
0
résultats
claude
Audité par
Aucun problème de sécurité trouvé

Version de l’audit 1

Sûr

Jan 10, 2026, 10:53 AM

Pure documentation skill containing only markdown files, code examples, and templates. No executable scripts, no network calls, no file system access beyond its own resources, and no environment variable access. Contains only testing guidance and best practices.

5
Fichiers analysés
1,337
Lignes analysées
0
résultats
claude
Audité par
Aucun problème de sécurité trouvé