Habilidades project-scaffolder Histórico de Auditoria
📦

Histórico de Auditoria

project-scaffolder - 6 auditorias

Versão da auditoria 6

Mais recente Baixo Risco

Jan 21, 2026, 04:45 PM

All static findings are false positives. The skill is a documentation-only project scaffolding tool. Scanner misinterpreted Go import statements as dynamic imports, Cobra CLI framework references as cmd.exe execution, and legitimate configuration URLs and environment variable patterns as security risks. No actual malicious code execution, credential exfiltration, or command injection patterns present.

2
Arquivos analisados
2,301
Linhas analisadas
5
achados
claude
Auditado por
Nenhum problema de segurança encontrado

Fatores de risco

⚡ Contém scripts (4)
⚙️ Comandos externos (79)
🌐 Acesso à rede (5)
🔑 Variáveis de ambiente (14)
📁 Acesso ao sistema de arquivos (1)

Versão da auditoria 5

Risco Médio

Jan 16, 2026, 11:06 PM

AI analysis failed after multiple attempts - MANUAL REVIEW REQUIRED before publishing. This skill cannot be auto-published until reviewed by a human.

2
Arquivos analisados
1,142
Linhas analisadas
5
achados
claude
Auditado por
Nenhum problema de segurança encontrado

Fatores de risco

🌐 Acesso à rede (5)
⚡ Contém scripts (2)
⚙️ Comandos externos (77)
📁 Acesso ao sistema de arquivos (1)
🔑 Variáveis de ambiente (12)

Padrões Detectados

Hardcoded URLC2 keywordsWeak cryptographic algorithmDynamic import() expressionRuby/shell backtick executionShell command substitutionTemplate literal with command substitutionWindows cmd.exeHardcoded IP addressHidden file accessEnvironment variable access (dot notation)Environment variable objectdotenv libraryDatabase connection stringsGeneric API/secret keysEnvironment file accessEnvironment variant filesSQLite database file[HEURISTIC] DANGEROUS COMBINATION: Code execution + Network + Credential access[HEURISTIC] SUSPICIOUS COMBINATION: Filesystem + Credentials + Network

Versão da auditoria 4

Risco Médio

Jan 16, 2026, 11:06 PM

AI analysis failed after multiple attempts - MANUAL REVIEW REQUIRED before publishing. This skill cannot be auto-published until reviewed by a human.

2
Arquivos analisados
1,142
Linhas analisadas
5
achados
claude
Auditado por
Nenhum problema de segurança encontrado

Fatores de risco

🌐 Acesso à rede (5)
⚡ Contém scripts (2)
⚙️ Comandos externos (77)
📁 Acesso ao sistema de arquivos (1)
🔑 Variáveis de ambiente (12)

Padrões Detectados

Hardcoded URLC2 keywordsWeak cryptographic algorithmDynamic import() expressionRuby/shell backtick executionShell command substitutionTemplate literal with command substitutionWindows cmd.exeHardcoded IP addressHidden file accessEnvironment variable access (dot notation)Environment variable objectdotenv libraryDatabase connection stringsGeneric API/secret keysEnvironment file accessEnvironment variant filesSQLite database file[HEURISTIC] DANGEROUS COMBINATION: Code execution + Network + Credential access[HEURISTIC] SUSPICIOUS COMBINATION: Filesystem + Credentials + Network

Versão da auditoria 3

Seguro

Jan 10, 2026, 12:47 PM

Pure prompt-based skill containing only templates and guidance documentation. No executable code, no file system access, no network operations, and no command execution capabilities. This skill provides project scaffolding instructions that the AI generates for users to apply manually.

1
Arquivos analisados
950
Linhas analisadas
0
achados
claude
Auditado por
Nenhum problema de segurança encontrado

Versão da auditoria 2

Seguro

Jan 10, 2026, 12:47 PM

Pure prompt-based skill containing only templates and guidance documentation. No executable code, no file system access, no network operations, and no command execution capabilities. This skill provides project scaffolding instructions that the AI generates for users to apply manually.

1
Arquivos analisados
950
Linhas analisadas
0
achados
claude
Auditado por
Nenhum problema de segurança encontrado

Versão da auditoria 1

Seguro

Jan 10, 2026, 12:47 PM

Pure prompt-based skill containing only templates and guidance documentation. No executable code, no file system access, no network operations, and no command execution capabilities. This skill provides project scaffolding instructions that the AI generates for users to apply manually.

1
Arquivos analisados
950
Linhas analisadas
0
achados
claude
Auditado por
Nenhum problema de segurança encontrado