История аудитов - llm-doc-writer

Версия аудита 7

Последняя Безопасно

Jun 28, 2026, 04:42 AM

Static analysis reported external command, network, weak crypto, and reconnaissance patterns. Manual review found only markdown examples, inline code formatting, and ordinary documentation text, with no executable code or malicious intent.

2

Просканировано файлов

282

Проанализировано строк

4

Review items

0

False positives ignored

Confirmed security concerns (4)

Низкий

patterns.md:7 patterns.md:23 patterns.md:27 patterns.md:41 patterns.md:49 patterns.md:58 patterns.md:62 patterns.md:65 patterns.md:71 patterns.md:72 patterns.md:80 patterns.md:89 patterns.md:93 patterns.md:97 patterns.md:98 patterns.md:99 patterns.md:100 patterns.md:108 patterns.md:119 patterns.md:123 patterns.md:126 patterns.md:134 SKILL.md:20 SKILL.md:30 SKILL.md:36 SKILL.md:48 SKILL.md:52 SKILL.md:61 SKILL.md:62 SKILL.md:63 SKILL.md:67 SKILL.md:73 SKILL.md:75 SKILL.md:76 SKILL.md:82 SKILL.md:93 SKILL.md:94 SKILL.md:95 SKILL.md:103 SKILL.md:109

False Positive: Markdown Backticks Misread as Shell Execution

The external command detections are markdown fences or inline command examples. No Ruby code, shell execution logic, or user-controlled command invocation was found.

Both scanned files are markdown documentation. The flagged locations are code fences, inline command examples, or formatting markers, not executable Ruby backtick calls.

Низкий

patterns.md:12 patterns.md:19 patterns.md:104 SKILL.md:3 SKILL.md:38 SKILL.md:98

False Positive: Weak Crypto Pattern in Documentation Text

The weak cryptography detections match ordinary words and markdown references. No hashing, encryption, signing, or credential handling implementation was found.

Manual review found no cryptographic code. The lines contain documentation prose, headers, or references such as CLAUDE.md.

Низкий

patterns.md:117

False Positive: Network Pattern in Architecture Example

The network detection appears in a prose example about REST APIs between services. No Python HTTP library import, endpoint, or outbound request code was found.

The line is inside a before-and-after documentation example. It describes architecture communication and does not perform network activity.

Низкий

patterns.md:139

False Positive: Reconnaissance Pattern in Section Heading

The reconnaissance detection maps to an anti-patterns heading. No host, user, process, environment, or filesystem discovery command was found.

The flagged line is a markdown heading introducing writing anti-patterns. There is no executable system reconnaissance behavior in the file.

Аудитор:: codex

Версия аудита 6

Безопасно

Jan 21, 2026, 02:49 PM

All 55 static findings are false positives. The scanner misidentified markdown documentation syntax as security issues. Backticks are markdown code fences, not shell execution. RabbitMQ and JWT mentions are technology references, not weak crypto. The skill contains only documentation patterns and has no actual code execution, network calls, or cryptographic operations.

3

Просканировано файлов

926

Проанализировано строк

0

Review items

0

False positives ignored

Проблем безопасности не найдено

Аудитор:: claude

Версия аудита 5

Средний риск Audit incomplete

Jan 16, 2026, 03:09 PM

AI analysis failed after multiple attempts - MANUAL REVIEW REQUIRED before publishing. This skill cannot be auto-published until reviewed by a human.

Manual review required

This audit did not complete successfully. The quality score is capped until a successful audit is available.

3

Просканировано файлов

471

Проанализировано строк

3

Review items

0

False positives ignored

Факторы риска

Обнаруженные паттерны

Ruby/shell backtick executionPython HTTP librariesWeak cryptographic algorithmSystem reconnaissance

Аудитор:: claude

Версия аудита 4

Средний риск Audit incomplete

Jan 16, 2026, 03:09 PM

AI analysis failed after multiple attempts - MANUAL REVIEW REQUIRED before publishing. This skill cannot be auto-published until reviewed by a human.

Manual review required

This audit did not complete successfully. The quality score is capped until a successful audit is available.

3

Просканировано файлов

471

Проанализировано строк

3

Review items

0

False positives ignored

Факторы риска

Обнаруженные паттерны

Ruby/shell backtick executionPython HTTP librariesWeak cryptographic algorithmSystem reconnaissance

Аудитор:: claude

Версия аудита 3

Безопасно

Jan 10, 2026, 09:55 AM

Pure prompt-based documentation skill with no code execution, filesystem access, network calls, or system modifications. Contains only instructional markdown content with writing guidelines and examples.

2

Просканировано файлов

282

Проанализировано строк

0

Review items

0

False positives ignored

Проблем безопасности не найдено

Аудитор:: claude

Версия аудита 2

Безопасно

Jan 10, 2026, 09:55 AM

Pure prompt-based documentation skill with no code execution, filesystem access, network calls, or system modifications. Contains only instructional markdown content with writing guidelines and examples.

2

Просканировано файлов

282

Проанализировано строк

0

Review items

0

False positives ignored

Проблем безопасности не найдено

Аудитор:: claude

Версия аудита 1

Безопасно

Jan 10, 2026, 09:55 AM

Pure prompt-based documentation skill with no code execution, filesystem access, network calls, or system modifications. Contains only instructional markdown content with writing guidelines and examples.

2

Просканировано файлов

282

Проанализировано строк

0

Review items

0

False positives ignored

Проблем безопасности не найдено

Аудитор:: claude