監査履歴

Static analysis reported many command, network, environment, script, and filesystem patterns, but review shows most are documentation examples or security-rule templates. The skill is still medium risk because it provides real ffuf network fuzzing and credential-fuzzing workflows that require authorization and rate limits. No prompt injection or confirmed malicious intent was found.

Documentation-only skill providing guidance for ffuf, a legitimate open-source DAST tool. All static findings are in markdown files and YAML templates showing example commands. No executable code, network operations, or credential access present in the skill itself. Heuristic alerts trigger on expected DAST tool patterns (command execution, network requests, credential handling) which are legitimate functionality for web fuzzing.

Documentation-only skill providing guidance for ffuf, a legitimate open-source DAST tool. All static findings are in markdown files and YAML templates showing example commands. No executable code, network operations, or credential access present in the skill itself. Heuristic alerts trigger on expected DAST tool patterns (command execution, network requests, credential handling) which are legitimate functionality for web fuzzing.

Documentation-only skill containing no executable code. Provides guidance for using the legitimate open-source ffuf security tool. All files are template documentation with defensive security patterns. No network operations, file system access, or code execution paths present.

Documentation-only skill containing no executable code. Provides guidance for using the legitimate open-source ffuf security tool. All files are template documentation with defensive security patterns. No network operations, file system access, or code execution paths present.

Documentation-only skill containing no executable code. Provides guidance for using the legitimate open-source ffuf security tool. All files are template documentation with defensive security patterns. No network operations, file system access, or code execution paths present.