Histórico de Auditoria
knowledge-base - 5 auditorias
Versão da auditoria 5
Mais recente Baixo RiscoJan 17, 2026, 04:41 AM
This is a legitimate knowledge base documentation tool. All static findings are false positives: child_process exec is imported but never used; backticks are JavaScript template literals for documentation generation, not shell execution; path traversal warnings are mitigated by explicit sanitization (lines 217, 225); hidden files are explicitly skipped (lines 149, 194, 288, 357, 423, 473); all operations scoped to project-local docs/knowledge directory with no network calls or credential access.
Fatores de risco
📁 Acesso ao sistema de arquivos (4)
Versão da auditoria 4
Baixo RiscoJan 17, 2026, 04:41 AM
This is a legitimate knowledge base documentation tool. All static findings are false positives: child_process exec is imported but never used; backticks are JavaScript template literals for documentation generation, not shell execution; path traversal warnings are mitigated by explicit sanitization (lines 217, 225); hidden files are explicitly skipped (lines 149, 194, 288, 357, 423, 473); all operations scoped to project-local docs/knowledge directory with no network calls or credential access.
Fatores de risco
📁 Acesso ao sistema de arquivos (4)
Versão da auditoria 3
Baixo RiscoJan 10, 2026, 02:27 PM
This is a legitimate knowledge base management tool with filesystem operations scoped to the project-local docs/knowledge directory. Imports exec from child_process but never uses it. No network calls, no credential access, and behavior matches stated purpose.
Fatores de risco
📁 Acesso ao sistema de arquivos (4)
Versão da auditoria 2
Baixo RiscoJan 10, 2026, 02:27 PM
This is a legitimate knowledge base management tool with filesystem operations scoped to the project-local docs/knowledge directory. Imports exec from child_process but never uses it. No network calls, no credential access, and behavior matches stated purpose.
Fatores de risco
📁 Acesso ao sistema de arquivos (4)
Versão da auditoria 1
Baixo RiscoJan 10, 2026, 02:27 PM
This is a legitimate knowledge base management tool with filesystem operations scoped to the project-local docs/knowledge directory. Imports exec from child_process but never uses it. No network calls, no credential access, and behavior matches stated purpose.