Audit History

Most static alerts are false positives caused by Markdown code formatting, relative documentation links, and descriptive advertising-analysis text. One documented ledger command interpolates a campaign placeholder without quoting or validation, which can permit shell command injection if executed with adversarial input. No prompt-injection language or data-exfiltration intent was found.

Most static alerts are false positives caused by Markdown code formatting, relative documentation links, and descriptive advertising-analysis text. One documented ledger command interpolates a campaign placeholder without quoting or validation, which can permit shell command injection if executed with adversarial input. No prompt-injection language or data-exfiltration intent was found.

Thirty-four static alerts are false positives caused by Markdown formatting, fixed repository links, benign GitHub metadata, and ordinary campaign terminology. The line 57 alert is confirmed because the skill directs execution of a Python ledger command with an unquoted campaign placeholder. No prompt injection or malicious intent was found.

Thirty-four static alerts are false positives caused by Markdown formatting, fixed repository links, benign GitHub metadata, and ordinary campaign terminology. The line 57 alert is confirmed because the skill directs execution of a Python ledger command with an unquoted campaign placeholder. No prompt injection or malicious intent was found.

Most detections are false positives caused by Markdown code formatting, documentation links, homepage URLs, and ordinary campaign-monitoring language. Two findings are confirmed: the command template uses an unquoted campaign value, and the save template does not require filename sanitization.

Most static findings are Markdown backticks, GitHub homepage metadata, or repository-relative documentation links. I confirmed risk where the skill tells agents to run ledger commands and save files using a user-provided campaign name. No prompt injection attempt was found.

Most static findings are Markdown code spans, code fences, homepage metadata, or repository-relative documentation links. I confirmed one medium external-command risk because the skill tells the agent to run a local ledger command with a user-supplied campaign placeholder. No evidence found of prompt injection, credential exfiltration, or malicious network behavior.