📦

감사 이력

quetrex-development-workflow - 7 감사

감사 버전 7

최신 중간 위험

Jun 28, 2026, 12:52 PM

Static analysis found many command-like strings, but review shows they are GitHub CLI and git workflow examples for a Quetrex development process. The Windows SAM and weak cryptography alerts are false positives from ordinary project text and filenames. The skill is publishable with a warning because it instructs users to run external commands that can modify GitHub state.

1
스캔된 파일
408
분석된 줄 수
3
발견 사항
codex
감사자
중간 위험 문제 (1)
External GitHub Workflow Commands
The skill provides commands such as GitHub issue creation, workflow execution, PR inspection, PR merge, and log download. These commands are legitimate for the stated workflow, but they can alter repository state or retrieve CI artifacts when run with an authenticated GitHub CLI session.
낮은 위험 문제 (1)
High-Severity Static Matches Are False Positives
The weak cryptography and Windows SAM static alerts do not correspond to cryptographic operations or Windows credential access. The reviewed lines contain a skill description, issue example text, TDD workflow text, and a project memory filename.

감지된 패턴

State-Changing CLI Examples

감사 버전 6

낮은 위험

Jan 21, 2026, 02:56 PM

Documentation-only skill with no executable code. Static findings are false positives triggered by bash command examples in markdown documentation. No actual command execution, credential access, or cryptographic operations present. All critical and high-severity findings dismissed after evaluation.

2
스캔된 파일
1,227
분석된 줄 수
5
발견 사항
claude
감사자

심각한 문제 (2)

Windows SAM database access
Pattern 'SAM' detected in filenames and text. Static analyzer misidentified 'ARCHITECTURE-INTELLIGENCE-SYSTEM.md' as Windows SAM database. No actual SAM database access exists.
Dangerous combination: Code execution + Network + Credential access
Heuristic detected combination of command documentation, network references, and credential mentions.

높은 위험 문제 (1)

Weak cryptographic algorithm usage
Pattern detected suggesting weak cryptographic algorithms.
중간 위험 문제 (1)
Shell command examples in documentation
Bash command examples with backtick-style patterns found in SKILL.md documentation.

감사 버전 3

안전

Jan 10, 2026, 11:07 AM

Pure documentation skill containing only markdown content. No executable code, scripts, network operations, or filesystem access beyond its own file. This is a safe reference guide for project workflow.

1
스캔된 파일
403
분석된 줄 수
0
발견 사항
claude
감사자
보안 문제가 발견되지 않았습니다

감사 버전 2

안전

Jan 10, 2026, 11:07 AM

Pure documentation skill containing only markdown content. No executable code, scripts, network operations, or filesystem access beyond its own file. This is a safe reference guide for project workflow.

1
스캔된 파일
403
분석된 줄 수
0
발견 사항
claude
감사자
보안 문제가 발견되지 않았습니다

감사 버전 1

안전

Jan 10, 2026, 11:07 AM

Pure documentation skill containing only markdown content. No executable code, scripts, network operations, or filesystem access beyond its own file. This is a safe reference guide for project workflow.

1
스캔된 파일
403
분석된 줄 수
0
발견 사항
claude
감사자
보안 문제가 발견되지 않았습니다