История аудитов

Static analysis flagged many Markdown backtick spans and command examples as external command execution. Review found no executable scripts, prompt injection, network exfiltration, or malicious intent; the examples are project validation checks for Firebase code. The skill is safe to publish with low risk because it may lead an agent to run local grep, npm, and build commands in a user project.

This is a pure prompt-based documentation skill with no executable code. The static scanner flagged Markdown backtick syntax (for file paths, skill references, and example commands) as shell execution patterns - these are false positives. No network access, file system modifications, or actual command execution capabilities exist. The skill only provides validation guidance for Claude to follow when reviewing Firebase projects.

This is a pure prompt-based documentation skill with no executable code. The static scanner flagged Markdown backtick syntax (for file paths, skill references, and example commands) as shell execution patterns - these are false positives. No network access, file system modifications, or actual command execution capabilities exist. The skill only provides validation guidance for Claude to follow when reviewing Firebase projects.

This is a pure prompt-based skill with no executable code. It contains only markdown instructions for validating Firebase projects. No network access, file system modifications, or command execution capabilities.