감사 이력
pufferlib - 4 감사들
감사 버전 4
최신 안전Jan 17, 2026, 07:44 AM
All 331 static findings are FALSE POSITIVES. This is a legitimate open-source reinforcement learning library. The static analyzer incorrectly flagged bash command examples in markdown documentation (SKILL.md, references/*.md) as dangerous backtick execution. No actual command injection, credential exfiltration, or malicious patterns exist in the codebase. Verified via grep - no hashlib, subprocess, or actual dangerous execution patterns found.
감사 버전 3
안전Jan 17, 2026, 07:44 AM
All 331 static findings are FALSE POSITIVES. This is a legitimate open-source reinforcement learning library. The static analyzer incorrectly flagged bash command examples in markdown documentation (SKILL.md, references/*.md) as dangerous backtick execution. No actual command injection, credential exfiltration, or malicious patterns exist in the codebase. Verified via grep - no hashlib, subprocess, or actual dangerous execution patterns found.
감사 버전 2
안전Jan 12, 2026, 04:49 PM
All 316 static findings are false positives. The analyzer flagged documentation patterns (code examples, CLI commands, troubleshooting tips) as security issues. The actual Python code contains only standard reinforcement learning training patterns with no malicious behavior.
위험 요인
⚙️ 외부 명령어 (251)
📁 파일 시스템 액세스 (1)
🌐 네트워크 접근 (2)
감사 버전 1
안전Jan 4, 2026, 04:24 PM
This skill contains documentation and template scripts for reinforcement learning. No credential harvesting, data exfiltration, code obfuscation, or malicious patterns were found. All capabilities (training loops, checkpointing, logging) are standard ML operations that align with the stated RL training purpose.