История аудитов

Of 74 static findings, 72 are false positives involving Markdown, ordinary diagnostics, documentation links, or local development access. Two findings confirm instructions to install an unpinned global package without an explicit approval step; a separate concern is retained authentication state without cleanup guidance. No evidence found of credential exfiltration, malicious reconnaissance, or audit-directed prompt injection.