監査履歴

Static analysis flagged many command, network, environment, filesystem, and script patterns. Most findings are documentation examples or legitimate SAST workflow guidance, but the Docker socket mount, world-writable Docker socket advice, and pipe-to-shell installers are confirmed high-risk operational patterns. No evidence found of prompt injection or confirmed malicious intent, so the skill is not blocked but should not publish without revisions.

Documentation-only skill containing no executable code. All static findings are false positives - patterns detected are legitimate documentation examples showing vulnerable code patterns that Horusec scanner is designed to detect. Docker socket references and command examples are for running Horusec CLI tool, not for malicious purposes. All URLs point to legitimate security resources (Horusec, OWASP, CWE).

Documentation-only skill containing no executable code. All static findings are false positives - patterns detected are legitimate documentation examples showing vulnerable code patterns that Horusec scanner is designed to detect. Docker socket references and command examples are for running Horusec CLI tool, not for malicious purposes. All URLs point to legitimate security resources (Horusec, OWASP, CWE).

This skill contains only documentation and configuration templates. No executable scripts, no network calls, and no direct filesystem access. The skill guides users on how to use the Horusec CLI tool which they install separately. Pure documentation-based skill with no code execution capabilities.

This skill contains only documentation and configuration templates. No executable scripts, no network calls, and no direct filesystem access. The skill guides users on how to use the Horusec CLI tool which they install separately. Pure documentation-based skill with no code execution capabilities.

This skill contains only documentation and configuration templates. No executable scripts, no network calls, and no direct filesystem access. The skill guides users on how to use the Horusec CLI tool which they install separately. Pure documentation-based skill with no code execution capabilities.