История аудитов

Most external-command and network-reconnaissance flags are false positives caused by Markdown examples and report text. The audit confirms a real filesystem risk from permission to write to ~/.claude and identifies an unsafe prompt-injection style instruction hierarchy.

Most external-command and network-reconnaissance flags are false positives caused by Markdown examples and report text. The audit confirms a real filesystem risk from permission to write to ~/.claude and identifies an unsafe prompt-injection style instruction hierarchy.

Static command-execution, weak-crypto, and network-reconnaissance findings are false positives caused by Markdown backticks, file-name examples, and report text. The confirmed risk is an instruction allowing writes to ~/.claude, which can affect agent configuration and should be disclosed for a community skill.

Static analysis detected 22 patterns flagged as potential security issues. Manual review confirms all findings are false positives caused by markdown syntax misinterpreted as code patterns. The backticks detected are markdown code formatting delimiters, not shell command execution. YAML frontmatter and heading markers were misidentified as cryptographic patterns. No actual security risks present. This is documentation-only content for generating workflow reports.

This is a pure prompt-based skill with no executable code. All 31 static findings are false positives. The skill contains only markdown documentation defining report formats and JSON metadata. No actual cryptographic operations, shell commands, or security risks are present.

This is a pure prompt-based skill with no executable code. All 31 static findings are false positives. The skill contains only markdown documentation defining report formats and JSON metadata. No actual cryptographic operations, shell commands, or security risks are present.

This is a pure prompt-based skill with no executable code. It defines report generation behavior and output formats for the GHE workflow system. No scripts, network calls, filesystem access beyond specified directories, or external commands are present.

This is a pure prompt-based skill with no executable code. It defines report generation behavior and output formats for the GHE workflow system. No scripts, network calls, filesystem access beyond specified directories, or external commands are present.