Compétences add-core-function Historique des audits
📦

Historique des audits

add-core-function - 6 audits

Version de l’audit 6

Dernier Sûr

Jun 28, 2026, 10:25 AM

The static analyzer flagged Markdown backticks, relative TypeScript import examples, and the word description as security patterns. Manual review found no executable shell commands, no path traversal behavior, no weak cryptography, no network exfiltration, and no prompt injection attempts.

1
Fichiers analysés
147
Lignes analysées
3
résultats
codex
Audité par
Problèmes à risque faible (3)
Markdown Backticks Misidentified as Shell Execution
Static findings for Ruby or shell backtick execution are false positives. The flagged lines are Markdown inline code, fenced directory examples, or TypeScript examples, not executable Ruby or shell code.
Relative Import Paths Misidentified as Path Traversal
Static path traversal findings are false positives. The flagged paths are TypeScript import examples and project layout guidance for local source files.
Weak Cryptography Pattern Misidentified
The weak cryptography findings at lines 3 and 66 are false positives. They match ordinary description text, not cryptographic algorithms or security-sensitive code.

Version de l’audit 5

Sûr

Jan 16, 2026, 05:16 PM

Pure documentation skill containing only TypeScript code examples and project conventions. All 54 static findings are false positives caused by the scanner misinterpreting documentation patterns as security issues. The skill provides no executable code, scripts, network access, or filesystem operations.

2
Fichiers analysés
327
Lignes analysées
2
résultats
claude
Audité par
Aucun problème de sécurité trouvé

Version de l’audit 4

Sûr

Jan 16, 2026, 05:16 PM

Pure documentation skill containing only TypeScript code examples and project conventions. All 54 static findings are false positives caused by the scanner misinterpreting documentation patterns as security issues. The skill provides no executable code, scripts, network access, or filesystem operations.

2
Fichiers analysés
327
Lignes analysées
2
résultats
claude
Audité par
Aucun problème de sécurité trouvé

Version de l’audit 3

Sûr

Jan 10, 2026, 10:24 AM

Pure documentation skill containing only guidance for creating TypeScript functions. No executable code, scripts, network calls, or filesystem access beyond reading the skill file.

1
Fichiers analysés
146
Lignes analysées
0
résultats
claude
Audité par
Aucun problème de sécurité trouvé

Version de l’audit 2

Sûr

Jan 10, 2026, 10:24 AM

Pure documentation skill containing only guidance for creating TypeScript functions. No executable code, scripts, network calls, or filesystem access beyond reading the skill file.

1
Fichiers analysés
146
Lignes analysées
0
résultats
claude
Audité par
Aucun problème de sécurité trouvé

Version de l’audit 1

Sûr

Jan 10, 2026, 10:24 AM

Pure documentation skill containing only guidance for creating TypeScript functions. No executable code, scripts, network calls, or filesystem access beyond reading the skill file.

1
Fichiers analysés
146
Lignes analysées
0
résultats
claude
Audité par
Aucun problème de sécurité trouvé