Навыки wp-block-themes История аудитов
📦

История аудитов

wp-block-themes - 7 аудиты

Версия аудита 7

Последняя Низкий риск

Jun 28, 2026, 11:44 AM

Static analysis reported many high-risk patterns, but review found no malicious intent, no prompt injection, and no confirmed weak cryptography. Most command and crypto matches are Markdown backticks around WordPress terms, file paths, or documentation links. The only real concern is a local Node.js helper that reads the current repository to detect block theme folders.

8
Просканировано файлов
409
Проанализировано строк
8
находки
codex
Проверено
Проблемы низкого риска (4)
Local Repository Filesystem Enumeration
The helper script walks the current working directory, reads theme.json files, and prints a report that includes the repository root. This is legitimate for theme detection, but it exposes local paths in command output and should only be run in intended project directories.
Markdown Backtick False Positives
Many external command detections are false positives. The flagged backticks surround WordPress file names, folders, and theme.json keys in Markdown, not executable Ruby or shell code.
Documentation URL False Positives
The network findings are hardcoded links to WordPress documentation and plugin pages. No file performs fetch, HTTP requests, package installation, or data upload.
Weak Cryptography False Positives
The high-severity weak cryptography detections appear to match the text theme.json and URLs containing json. No hashing, encryption, password handling, or cryptographic API use was found.

Версия аудита 6

Низкий риск

Jan 16, 2026, 05:50 PM

This skill provides documentation and guidance for WordPress block theme development. The only executable script (detect_block_themes.mjs) safely reads theme.json files using bounded filesystem operations with no network access or command execution. All 92 static findings are false positives: markdown backticks are misinterpreted as shell execution, documentation URLs as network calls, and JSON content hashes as C2 indicators.

9
Просканировано файлов
659
Проанализировано строк
2
находки
claude
Проверено
Проблемы среднего риска (1)
Filesystem Read Operations for Theme Detection
Node.js fs operations for reading theme.json files

Факторы риска

📁 Доступ к файловой системе (1)

Версия аудита 5

Низкий риск

Jan 16, 2026, 05:50 PM

This skill provides documentation and guidance for WordPress block theme development. The only executable script (detect_block_themes.mjs) safely reads theme.json files using bounded filesystem operations with no network access or command execution. All 92 static findings are false positives: markdown backticks are misinterpreted as shell execution, documentation URLs as network calls, and JSON content hashes as C2 indicators.

9
Просканировано файлов
659
Проанализировано строк
2
находки
claude
Проверено
Проблемы среднего риска (1)
Filesystem Read Operations for Theme Detection
Node.js fs operations for reading theme.json files

Факторы риска

📁 Доступ к файловой системе (1)

Версия аудита 4

Низкий риск

Jan 16, 2026, 05:50 PM

This skill provides documentation and guidance for WordPress block theme development. The only executable script (detect_block_themes.mjs) safely reads theme.json files using bounded filesystem operations with no network access or command execution. All 92 static findings are false positives: markdown backticks are misinterpreted as shell execution, documentation URLs as network calls, and JSON content hashes as C2 indicators.

9
Просканировано файлов
659
Проанализировано строк
2
находки
claude
Проверено
Проблемы среднего риска (1)
Node.js fs operations for reading theme.json files

Факторы риска

📁 Доступ к файловой системе (1)

Версия аудита 3

Низкий риск

Jan 10, 2026, 10:42 AM

This skill provides guidance and tooling for WordPress block theme development. The included script (detect_block_themes.mjs) safely scans repositories for theme.json files with bounded filesystem access and no network or command execution capabilities. All behavior matches the stated purpose.

8
Просканировано файлов
304
Проанализировано строк
2
находки
claude
Проверено
Проблем безопасности не найдено

Факторы риска

⚡ Содержит скрипты (1)
📁 Доступ к файловой системе (1)

Версия аудита 2

Низкий риск

Jan 10, 2026, 10:42 AM

This skill provides guidance and tooling for WordPress block theme development. The included script (detect_block_themes.mjs) safely scans repositories for theme.json files with bounded filesystem access and no network or command execution capabilities. All behavior matches the stated purpose.

8
Просканировано файлов
304
Проанализировано строк
2
находки
claude
Проверено
Проблем безопасности не найдено

Факторы риска

⚡ Содержит скрипты (1)
📁 Доступ к файловой системе (1)

Версия аудита 1

Низкий риск

Jan 10, 2026, 10:42 AM

This skill provides guidance and tooling for WordPress block theme development. The included script (detect_block_themes.mjs) safely scans repositories for theme.json files with bounded filesystem access and no network or command execution capabilities. All behavior matches the stated purpose.

8
Просканировано файлов
304
Проанализировано строк
2
находки
claude
Проверено
Проблем безопасности не найдено

Факторы риска

⚡ Содержит скрипты (1)
📁 Доступ к файловой системе (1)