監査履歴
security-audit - 6 監査
バージョン比較
監査済みバージョン間の機能と検出結果の変化（新しい順）。
2026년 7월 5일 오후 01:33
All three static findings were adjudicated as false positives. The suspected template-injection line is an audit report placeholder, and the two shell-execution findings are Markdown file references. No semantic evidence of prompt injection, exfiltration, or malicious intent was found.
リスク要因
⚙️ 外部コマンド (2)
2026년 7월 5일 오후 01:33
All three static findings were adjudicated as false positives. The suspected template-injection line is an audit report placeholder, and the two shell-execution findings are Markdown file references. No semantic evidence of prompt injection, exfiltration, or malicious intent was found.
リスク要因
⚙️ 外部コマンド (2)
2026년 6월 27일 오후 06:40
Static findings were reviewed in context and are false positives from markdown placeholders, checklist terms, and fenced report examples. No executable scripts, network calls, credential access, prompt injection, or malicious intent were found. The skill has low dual-use risk because it helps document security findings and proof-of-concept evidence.
確認済みのセキュリティ上の懸念 (1)
静的解析の誤検知を無視 (1)
これらの静的マッチはセマンティックレビューで却下されたか、スキーマのみのトークンに一致したため、透明性のために表示されていますが、品質スコアには影響しません。
2026년 1월 16일 오후 02:01
This is a pure documentation skill containing no executable code, no file system access, no network calls, and no external command execution. All 39 static findings are false positives caused by the scanner misinterpreting markdown syntax (code fences as backticks, CWE references as cryptographic algorithms, and template placeholders as template injection). The skill contains only documentation, templates, and guidelines for security auditing methodology.
リスク要因
⚙️ 外部コマンド (10)
2026년 1월 16일 오후 02:01
This is a pure documentation skill containing no executable code, no file system access, no network calls, and no external command execution. All 39 static findings are false positives caused by the scanner misinterpreting markdown syntax (code fences as backticks, CWE references as cryptographic algorithms, and template placeholders as template injection). The skill contains only documentation, templates, and guidelines for security auditing methodology.
リスク要因
⚙️ 外部コマンド (10)
2026년 1월 10일 오전 09:28
Pure prompt-based skill with no executable code, no file system access, no network calls, and no external command execution. Contains only documentation, templates, and guidelines for security auditing.