Audit History
video-ad-specs - 3 audits
Version comparison
Capability and finding changes across audited versions, newest first.
Jul 13, 2026, 11:13 AM
All 18 static findings are false positives caused by Markdown formatting, visible documentation links, and ordinary advertising guidance. The skill documents deliberate Belt and npx workflows, but contains no automatic execution, prompt injection, hidden network activity, reconnaissance, or malicious intent.
Risk Factors
⚙️ External commands (14)
🌐 Network access (2)
Jul 13, 2026, 11:13 AM
All 18 static findings are false positives caused by Markdown formatting, visible documentation links, and ordinary advertising guidance. The skill documents deliberate Belt and npx workflows, but contains no automatic execution, prompt injection, hidden network activity, reconnaissance, or malicious intent.
Risk Factors
⚙️ External commands (14)
🌐 Network access (2)
Jul 12, 2026, 09:48 AM
Seven command findings are confirmed because the skill directs users or agents to invoke remote CLI operations, including package installation and media generation. Markdown fence matches, ordinary reference links, and alleged reconnaissance text are false positives. A broad belt command permission is an additional medium-risk capability.
Confirmed security concerns (1)
Capability review items (8)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.