감사 이력

Static external-command hits mostly match Markdown code fences and TypeScript examples, so those are false positives. The setup section does contain real pnpm dlx commands that execute the latest ShadCN package, which is legitimate but carries supply-chain risk if run without review. The weak cryptography alerts are false positives from words such as description and CardDescription, with no cryptographic code found.

Pure documentation skill containing TypeScript code examples for ShadCN UI and Framer Motion integration. All 31 static findings are false positives: shell command detections are TypeScript code blocks, crypto algorithm flags are animation variant names like 'hidden', and reconnaissance flags are animation state names like 'show'. No executable code, network calls, filesystem access, or external commands detected.

Pure documentation skill containing TypeScript code examples for ShadCN UI and Framer Motion integration. All 31 static findings are false positives: shell command detections are TypeScript code blocks, crypto algorithm flags are animation variant names like 'hidden', and reconnaissance flags are animation state names like 'show'. No executable code, network calls, filesystem access, or external commands detected.

Pure documentation skill containing TypeScript code examples for ShadCN UI and Framer Motion integration. No executable code, network calls, filesystem access, or external commands detected. Contains only documentation and code samples.

Pure documentation skill containing TypeScript code examples for ShadCN UI and Framer Motion integration. No executable code, network calls, filesystem access, or external commands detected. Contains only documentation and code samples.

Pure documentation skill containing TypeScript code examples for ShadCN UI and Framer Motion integration. No executable code, network calls, filesystem access, or external commands detected. Contains only documentation and code samples.