📦
История аудитов
untangle-codebase - 1 аудит
Версия аудита 1 Последняя
6 нояб. 2026 г., 15:33
All 29 static findings are false positives caused by Markdown backticks around examples, identifiers, and code fences. No evidence found of credential theft, data exfiltration, or prompt injection. One semantic risk concerns stripping function bodies without specifying a separate analysis copy, which could damage working source.
1
Просканировано файлов
143
Проанализировано строк
2
Пункты проверки
0
Ложные срабатывания проигнорированы
Подтверждённые проблемы безопасности (1)
Средний
Skeleton Generation Lacks Source Preservation Safeguard
The tip says "script away the function bodies" without requiring a separate analysis copy. Applying this directly could erase implementation and uncommitted work.
The instruction explicitly proposes removing function bodies but provides no output-location or preservation constraint. Data loss depends on the implementing agent modifying originals.
Факторы риска
⚙️ Внешние команды (29)
SKILL.md:58 SKILL.md:78 SKILL.md:79 SKILL.md:80 SKILL.md:113-114 SKILL.md:114-115 SKILL.md:115 SKILL.md:116 SKILL.md:117-118 SKILL.md:118-119 SKILL.md:119 SKILL.md:120-121 SKILL.md:121 SKILL.md:122-123 SKILL.md:123 SKILL.md:124-128 SKILL.md:128-129 SKILL.md:129-130 SKILL.md:130-131 SKILL.md:131 SKILL.md:132-133 SKILL.md:133 SKILL.md:134 SKILL.md:136 SKILL.md:137-138 SKILL.md:138-139 SKILL.md:139-140 SKILL.md:140-141 SKILL.md:141
Аудитор:: codex