Histórico de auditoria
structured-logging - 8 auditorias
Comparação de versões
Alterações de capacidades e constatações entre versões auditadas, mais recentes primeiro.
| Versão | Data | Resultado | Itens de revisão | Mudança vs anterior |
|---|---|---|---|---|
| v8 Mais recente | 5 de jul. de 2026, 07:27 | 1 confirmado | 0 | Sem mudança de capacidade |
| v7 | 5 de jul. de 2026, 07:27 | 1 confirmado | 0 | Comandos externos |
| v6 | 28 de jun. de 2026, 22:04 | 1 confirmado | 0 | Comandos externos |
| v5 | 16 de jan. de 2026, 19:48 | Sem constatações confirmadas | 0 | Sem mudança de capacidade |
| v4 | 16 de jan. de 2026, 19:48 | Sem constatações confirmadas | 0 | Comandos externos |
| v3 | 10 de jan. de 2026, 12:11 | Sem constatações confirmadas | 0 | Sem mudança de capacidade |
| v2 | 10 de jan. de 2026, 12:11 | Sem constatações confirmadas | 0 | Sem mudança de capacidade |
| v1 | 10 de jan. de 2026, 12:11 | Sem constatações confirmadas | 0 | Base |
5 de jul. de 2026, 07:27
The static external command, sensitive file, and reconnaissance alerts are false positives caused by Markdown formatting, observability field names, and defensive guidance. No prompt injection or executable behavior was found. One medium semantic issue remains because the logging guidance can encourage broad collection of user, payment, business, and infrastructure data.
Preocupações de segurança confirmadas (1)
Fatores de risco
⚙️ Comandos externos (21)
5 de jul. de 2026, 07:27
The static external command, sensitive file, and reconnaissance alerts are false positives caused by Markdown formatting, observability field names, and defensive guidance. No prompt injection or executable behavior was found. One medium semantic issue remains because the logging guidance can encourage broad collection of user, payment, business, and infrastructure data.
Preocupações de segurança confirmadas (1)
Fatores de risco
⚙️ Comandos externos (21)
28 de jun. de 2026, 22:04
Static analysis reported many high-risk patterns, but review found they are Markdown formatting, field names, examples, and table text rather than executable commands or malicious code. No prompt injection, network activity, file access, or executable scripts were found. The remaining concern is medium risk because the reference encourages logging privacy-sensitive fields and should be used with data minimization controls.
Preocupações de segurança confirmadas (1)
Falsos positivos estáticos ignorados (3)
Estas correspondências estáticas foram descartadas pela revisão semântica ou corresponderam a tokens apenas de esquema, portanto são exibidas para transparência, mas não afetam a pontuação de qualidade.
16 de jan. de 2026, 19:48
This skill contains pure documentation about structured logging best practices. No executable code, network calls, or file system operations exist. All 148 static findings are false positives caused by the analyzer misinterpreting markdown documentation examples as executable code patterns. The skill teaches logging patterns through documentation only.
Fatores de risco
⚙️ Comandos externos (110)
16 de jan. de 2026, 19:48
This skill contains pure documentation about structured logging best practices. No executable code, network calls, or file system operations exist. All 148 static findings are false positives caused by the analyzer misinterpreting markdown documentation examples as executable code patterns. The skill teaches logging patterns through documentation only.
Fatores de risco
⚙️ Comandos externos (110)
10 de jan. de 2026, 12:11
This skill contains only documentation about structured logging best practices. No executable code, network calls, or file system access detected. Pure knowledge-based content with no security risks.
10 de jan. de 2026, 12:11
This skill contains only documentation about structured logging best practices. No executable code, network calls, or file system access detected. Pure knowledge-based content with no security risks.
10 de jan. de 2026, 12:11
This skill contains only documentation about structured logging best practices. No executable code, network calls, or file system access detected. Pure knowledge-based content with no security risks.