Histórico de Auditoria
research-grants - 4 auditorias
Versão da auditoria 4
Mais recente SeguroJan 17, 2026, 06:12 AM
All 306 static findings are false positives. This is a pure documentation skill containing markdown templates and guidelines for research grant writing. The scanner incorrectly flagged: (1) academic terminology as cryptographic algorithms, (2) education acronyms (REU, LSAMP) as Windows SAM database, (3) federal website URLs as hardcoded C2 URLs, (4) markdown code formatting backticks as shell execution. No executable code, network calls, or malicious patterns exist. The skill-report.json correctly identifies risk_level: safe.
Fatores de risco
🌐 Acesso à rede (1)
⚙️ Comandos externos (1)
Versão da auditoria 3
SeguroJan 17, 2026, 06:12 AM
All 306 static findings are false positives. This is a pure documentation skill containing markdown templates and guidelines for research grant writing. The scanner incorrectly flagged: (1) academic terminology as cryptographic algorithms, (2) education acronyms (REU, LSAMP) as Windows SAM database, (3) federal website URLs as hardcoded C2 URLs, (4) markdown code formatting backticks as shell execution. No executable code, network calls, or malicious patterns exist. The skill-report.json correctly identifies risk_level: safe.
Fatores de risco
🌐 Acesso à rede (1)
⚙️ Comandos externos (1)
Versão da auditoria 2
SeguroJan 12, 2026, 04:41 PM
This is a legitimate academic skill for research grant writing. All static analysis findings are false positives - the 'weak cryptographic algorithm' flags are from academic content about research methodologies, 'system reconnaissance' mentions are about literature review processes, and 'external command execution' are documentation examples, not actual executable code. No security risks identified.
Fatores de risco
🌐 Acesso à rede (47)
⚙️ Comandos externos (79)
Versão da auditoria 1
SeguroJan 4, 2026, 04:44 PM
This is a pure documentation skill containing only markdown guidance files, templates, and JSON configuration. No executable code, scripts, or network activity. All references to external URLs are public agency websites (nsf.gov, nih.gov, energy.gov, darpa.mil) for informational purposes only.