監査履歴
git-commit - 8 監査
バージョン比較
監査済みバージョン間の機能と検出結果の変化（新しい順）。
| バージョン | 日付 | 結果 | レビュー項目 | 前バージョンとの変化 |
|---|---|---|---|---|
| v8 最新 | 2026년 7월 4일 오후 04:37 | 確認された検出結果なし | 0 | 機能の変化なし |
| v7 | 2026년 7월 4일 오후 04:37 | 確認された検出結果なし | 0 | 機能の変化なし |
| v6 | 2026년 7월 4일 오후 06:00 | 確認された検出結果なし | 0 | ファイルシステムへのアクセス |
| v5 | 2026년 6월 27일 오후 03:50 | 1 確認済み | 0 | ファイルシステムへのアクセス |
| v4 | 2026년 1월 21일 오후 03:25 | 確認された検出結果なし | 1 | 機能の変化なし |
| v3 | 2026년 1월 16일 오후 12:21 | 確認された検出結果なし | 0 | 機能の変化なし |
| v2 | 2026년 1월 16일 오후 12:21 | 確認された検出結果なし | 0 | 外部コマンド |
| v1 | 2026년 1월 10일 오전 09:01 | 確認された検出結果なし | 0 | 基準 |
2026년 7월 4일 오후 04:37
The static findings are false positives caused by Markdown code fences and inline command examples, not executable Ruby backtick calls. The skill uses expected git commands for commit workflow guidance and explicitly warns users not to commit sensitive files.
リスク要因
2026년 7월 4일 오후 04:37
The static findings are false positives caused by Markdown code fences and inline command examples, not executable Ruby backtick calls. The skill uses expected git commands for commit workflow guidance and explicitly warns users not to commit sensitive files.
リスク要因
2026년 7월 4일 오후 06:00
All static hits are false positives: the backtick detections are Markdown fences, fixed Git command examples, or commit format examples. The .env finding is a protective warning that tells users not to commit sensitive files. No prompt injection or data exfiltration intent was found in SKILL.md.
リスク要因
2026년 6월 27일 오후 03:50
The static external command findings are true positives because the skill instructs the agent to run Git commands and create commits. The weak cryptography and environment file findings are false positives: the cited lines describe commit metadata or warn against committing secrets, and no malicious intent or prompt injection was found.
確認済みのセキュリティ上の懸念 (1)
静的解析の誤検知を無視 (2)
これらの静的マッチはセマンティックレビューで却下されたか、スキーマのみのトークンに一致したため、透明性のために表示されていますが、品質スコアには影響しません。
リスク要因
⚙️ 外部コマンド (3)
📁 ファイルシステムへのアクセス (2)
検出されたパターン
2026년 1월 21일 오후 03:25
The skill safely executes git commands as its core functionality. Static analyzer flagged 29 patterns but all are false positives: documentation examples using markdown backticks, security guidelines warning against committing .env files, and metadata in the JSON template itself. The skill follows secure practices and has legitimate use of external commands through the Bash tool.
機能レビュー項目 (1)
これらは、このスキルに期待される可能性のある実際のローカル機能であるため、レビューが必要ですが、確認済みの悪意ある動作としてはカウントされません。
リスク要因
⚙️ 外部コマンド (1)
2026년 1월 16일 오후 12:21
AI analysis failed after multiple attempts - MANUAL REVIEW REQUIRED before publishing. This skill cannot be auto-published until reviewed by a human.
リスク要因
検出されたパターン
2026년 1월 16일 오후 12:21
AI analysis failed after multiple attempts - MANUAL REVIEW REQUIRED before publishing. This skill cannot be auto-published until reviewed by a human.
リスク要因
検出されたパターン
2026년 1월 10일 오전 09:01
This is a pure prompt-based skill containing only documentation and instructions for git commit workflow. No executable code, scripts, or network activity. The skill uses standard git operations through Claude Code tools which are controlled by the user.