سجل التدقيق

Most static matches reflect the skill's legitimate purpose: local environment configuration, placeholder credentials, documentation, and test fixtures. Confirmed risks include remote scripts piped to shells, plaintext secret disclosure, unsafe permissions, and insecure secret output. No prompt injection or exfiltration intent was found, but 281 lower-priority analyzer matches remain outside this adjudication. Static review was capped at 400/681 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.

Five remote-installer pipe-to-shell examples are confirmed because they execute downloaded code without integrity verification. Most static matches are false positives from environment-management documentation and local examples. The helper also has confirmed secret-exposure risks when it prints differences, disables masking, or accepts passwords on the command line. Static review was capped at 400/681 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.

Five remote-installer pipe-to-shell examples are confirmed because they execute downloaded code without integrity verification. Most static matches are false positives from environment-management documentation and local examples. The helper also has confirmed secret-exposure risks when it prints differences, disables masking, or accepts passwords on the command line. Static review was capped at 400/681 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.

Five remote-installer pipe-to-shell examples are confirmed because they execute downloaded code without integrity verification. Most static matches are false positives from environment-management documentation and local examples. The helper also has confirmed secret-exposure risks when it prints differences, disables masking, or accepts passwords on the command line. Static review was capped at 400/681 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.

The skill is legitimate environment and secrets-management documentation, but it includes security-sensitive helper behavior and repeated pipe-to-shell installer recommendations. Most static matches are placeholders or expected .env guidance, while confirmed issues focus on unverified installer execution and possible disclosure of local secret values. Static review was capped at 400/653 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.

The skill is legitimate environment and secrets-management documentation, but it includes security-sensitive helper behavior and repeated pipe-to-shell installer recommendations. Most static matches are placeholders or expected .env guidance, while confirmed issues focus on unverified installer execution and possible disclosure of local secret values. Static review was capped at 400/653 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.

Most static detections are expected for an environment configuration skill and were adjudicated as placeholders, documentation, or local configuration access. Confirmed issues include remote installer commands piped to a shell, unguarded helper output writes, and examples that can print decrypted secrets or connection strings. No prompt injection text was found in the reviewed files.