Навыки qwen-image История аудитов
🖼️

История аудитов

qwen-image - 3 аудиты

Версия аудита 3

Последняя Безопасно

Mar 10, 2026, 08:19 AM

Static scanner flagged 53 potential issues (external_commands, network, weak_crypto, system_reconnaissance). Manual evaluation confirms all findings are false positives: backticks are markdown code formatting, URLs point to the legitimate inference.sh API service, and there is no cryptographic code or reconnaissance behavior. The skill is documentation for an image generation CLI tool with no malicious behavior.

1
Просканировано файлов
184
Проанализировано строк
4
находки
claude
Проверено
Проблемы низкого риска (2)
Shell Command Patterns in Documentation
Static scanner detected backtick commands in SKILL.md. These are markdown code formatting for example CLI commands (infsh app run...), not actual code execution.
Hardcoded URLs Point to Service API
URLs detected (inference.sh, example.com) are legitimate service endpoints required for the skill to function as an image generation tool.

Версия аудита 2

Безопасно

Mar 9, 2026, 08:22 AM

All 53 static analysis findings are false positives from documentation content. The detected patterns (backticks, URLs, version numbers) exist only within markdown code blocks and documentation examples, not in executable code. This skill provides legitimate documentation for using Alibaba Qwen-Image-2.0 models through the inference.sh CLI platform.

1
Просканировано файлов
184
Проанализировано строк
0
находки
claude
Проверено
Проблем безопасности не найдено

Версия аудита 1

Безопасно

Mar 8, 2026, 08:13 AM

This skill is a documentation file (SKILL.md) that provides guidance on using the inference.sh CLI for Alibaba Qwen-Image-2.0 image generation. All static findings (external_commands, network, weak cryptographic algorithm, system reconnaissance) are false positives. The skill contains only markdown documentation with example commands - no executable code. The backticks detected are markdown code block syntax, not shell execution. Network URLs are legitimate documentation links.

1
Просканировано файлов
184
Проанализировано строк
2
находки
claude
Проверено
Проблемы низкого риска (2)
External Commands in Documentation
The skill contains example CLI commands using infsh tool. These are documentation examples, not executable code. The skill is a SKILL.md file that provides usage instructions.
Hardcoded URLs in Documentation
Documentation contains URLs to inference.sh website and example image URLs. These are legitimate documentation links.