Histórico de Auditoria
cellxgene-census - 5 auditorias
Versão da auditoria 5
Mais recente Baixo RiscoJan 21, 2026, 05:20 PM
All 228 static findings are FALSE POSITIVEs. The scanner detected patterns in markdown documentation that are not actual security vulnerabilities. External command detections are backticks in code blocks. C2 keyword detections are the substring 'C2' in 'CELLxGENE'. Cryptographic algorithm detections are documentation patterns. System reconnaissance detections are the word 'reconnaissance' in documentation text. The skill is safe for publication.
Fatores de risco
🌐 Acesso à rede (1)
Versão da auditoria 4
Risco MédioJan 17, 2026, 06:04 AM
AI analysis failed after multiple attempts - MANUAL REVIEW REQUIRED before publishing. This skill cannot be auto-published until reviewed by a human.
Fatores de risco
⚙️ Comandos externos (200)
🌐 Acesso à rede (1)
Padrões Detectados
Versão da auditoria 3
Risco MédioJan 17, 2026, 06:04 AM
AI analysis failed after multiple attempts - MANUAL REVIEW REQUIRED before publishing. This skill cannot be auto-published until reviewed by a human.
Fatores de risco
⚙️ Comandos externos (200)
🌐 Acesso à rede (1)
Padrões Detectados
Versão da auditoria 2
SeguroJan 12, 2026, 04:28 PM
This is a legitimate bioinformatics tool for accessing the CZ CELLxGENE Census database. The static analysis findings are false positives - the 'external_commands' are actually Python code examples using backticks for markdown formatting, not shell execution. The 'weak cryptographic algorithm' findings reference documentation about data schemas, not actual crypto implementations.
Fatores de risco
⚙️ Comandos externos (200)
Versão da auditoria 1
SeguroJan 4, 2026, 04:46 PM
This skill contains only markdown documentation with example code patterns. No executable scripts, external commands, network calls, or filesystem access capabilities are present. Pure documentation skill.