Audit History

All 42 static matches are false positives. Relative Markdown links and documented paths were labeled as path traversal, while Markdown backticks were labeled as shell execution. The homepage URLs are metadata only, and no prompt injection, data exfiltration, or executable behavior was found.

All 42 static matches are false positives. Relative Markdown links and documented paths were labeled as path traversal, while Markdown backticks were labeled as shell execution. The homepage URLs are metadata only, and no prompt injection, data exfiltration, or executable behavior was found.

All 42 static findings are false positives caused by Markdown links, code formatting, path templates, or repository metadata URLs. The skill contains no executable code and includes explicit safeguards for untrusted input, claim approval, sending, and file saves. No malicious intent or prompt injection was found.

All 42 static findings are false positives caused by Markdown links, code formatting, path templates, or repository metadata URLs. The skill contains no executable code and includes explicit safeguards for untrusted input, claim approval, sending, and file saves. No malicious intent or prompt injection was found.

All 42 static findings are false positives caused by Markdown links, code fences, inline code, metadata URLs, and ordinary email terminology. The skill contains no executable implementation, prompt injection attempt, credential access, covert network request, or unsafe path construction.

Manual review found that the static findings are false positives from Markdown links, inline code formatting, prompt examples, and repository metadata. No executable shell commands, malicious path traversal, data exfiltration, system reconnaissance, or prompt injection attempts were found in the reviewed files.

All static findings were reviewed against the Markdown source files. The filesystem, command, blocker, and network alerts are false positives caused by relative documentation links, Markdown backticks, bounded memory paths, and metadata URLs. No prompt injection, data exfiltration, command execution, or unsafe filesystem intent was found.