История аудитов

Three command examples are confirmed medium-risk because they interpolate placeholders and invoke external Python scripts. The other 45 findings are documentation syntax, safe example domains, public links, or relative documentation references.

Три примера команд подтверждены как имеющие средний риск, поскольку они интерполируют заполнители и вызывают внешние скрипты Python. Остальные 45 находок относятся к синтаксису документации, безопасным доменам в примерах, публичным ссылкам или относительным ссылкам в документации.

Three findings are confirmed because SKILL.md directly recommends executing connector and ledger Python scripts with user-supplied placeholders. The other 45 detections are documentation syntax, example data, trusted informational links, or relative Markdown references; no prompt injection or malicious intent was found.

Most static findings are false positives from Markdown code formatting, relative documentation links, metadata URLs, and SEO reference examples. I confirmed the three lines that explicitly tell the agent to run local Python connector or ledger commands; I found no prompt injection or malicious exfiltration intent.

Most static alerts are Markdown links, examples, metadata, or inline code and are false positives. Three optional connector commands in SKILL.md remain confirmed medium risks because they instruct local python command execution with user-provided inputs.

Most static alerts are Markdown links, examples, metadata, or inline code and are false positives. Three optional connector commands in SKILL.md remain confirmed medium risks because they instruct local python command execution with user-provided inputs.

The static findings are documentation artifacts: Markdown code spans, relative repository links, example URLs, and optional connector examples. I found no prompt injection, covert data exfiltration, arbitrary code execution, or unsafe filesystem access in the reviewed files.