監査履歴
run-nx-generator - 7 監査
バージョン比較
監査済みバージョン間の機能と検出結果の変化（新しい順）。
2026年7月5日 20:01
The static findings are Markdown backtick and code block detections around documented Nx commands, not Ruby shell execution. The skill does intentionally guide shell-based Nx workflows, so users should review generated commands and workspace changes before execution. No prompt injection, data exfiltration, or hidden malicious intent was found in SKILL.md.
リスク要因
2026年7月5日 20:01
The static findings are Markdown backtick and code block detections around documented Nx commands, not Ruby shell execution. The skill does intentionally guide shell-based Nx workflows, so users should review generated commands and workspace changes before execution. No prompt injection, data exfiltration, or hidden malicious intent was found in SKILL.md.
リスク要因
2026年6月30日 10:42
Static analysis flagged many Markdown backticks and generator wording. The weak cryptography findings are false positives, but the skill intentionally guides shell commands that can modify a workspace.
機能レビュー項目 (1)
これらは、このスキルに期待される可能性のある実際のローカル機能であるため、レビューが必要ですが、確認済みの悪意ある動作としてはカウントされません。
静的解析の誤検知を無視 (2)
これらの静的マッチはセマンティックレビューで却下されたか、スキーマのみのトークンに一致したため、透明性のために表示されていますが、品質スコアには影響しません。
リスク要因
検出されたパターン
2026年1月17日 07:29
This is a documentation-only skill providing guidance on running Nx generators. All 29 static findings are false positives: MD5 hashes are content identifiers in metadata, backticks are markdown code formatting, URLs are source references, and the skill contains no executable code, network requests, or external command execution.
リスク要因
2026年1月17日 07:29
This is a documentation-only skill providing guidance on running Nx generators. All 29 static findings are false positives: MD5 hashes are content identifiers in metadata, backticks are markdown code formatting, URLs are source references, and the skill contains no executable code, network requests, or external command execution.
リスク要因
2026年1月6日 01:21
This is a documentation-only skill that provides guidance on running Nx generators. The skill file contains no executable code, makes no network requests, does not access the filesystem beyond its own content, and does not execute external commands. The referenced MCP tools are legitimate Nx tooling for generator discovery and execution.
2026年1月6日 01:21
This is a documentation-only skill that provides guidance on running Nx generators. The skill file contains no executable code, makes no network requests, does not access the filesystem beyond its own content, and does not execute external commands. The referenced MCP tools are legitimate Nx tooling for generator discovery and execution.