📦

Audit History

list-segment-builder - 6 audits

Version comparison

Capability and finding changes across audited versions, newest first.

VersionDateResultReview itemsChange vs previous
v6 LatestJul 26, 2026, 10:29 AM No confirmed findings1No capability change
v5 Jul 13, 2026, 02:02 PM No confirmed findings1No capability change
v4 Jul 13, 2026, 02:02 PM No confirmed findings1No capability change
v3 Jul 12, 2026, 12:55 PM 1 confirmed1No capability change
v2 Jul 6, 2026, 05:50 PM 1 confirmed1No capability change
v1 Jul 4, 2026, 04:14 PM No confirmed findings1Baseline

Jul 26, 2026, 10:29 AM

Most static findings are false positives caused by Markdown code fences, inline code, and relative documentation links. One documented Resend command can perform a live suppression update when invoked with --live; it should require a clear user confirmation immediately before execution. No prompt-injection or data-exfiltration intent was found.

1
Files scanned
88
Lines analyzed
4
Review items
0
False positives ignored
Capability review items (1)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium
Ruby/shell backtick execution
**Zero-dependency ESP sync (when Resend is the ESP)**: `python3 "${CLAUDE_PLUGIN_ROOT}/scripts/conne
This documentation instructs an agent to run a Python connector and states that the suppress subcommand mutates Resend when --live is supplied. The operation affects a remote ESP, so execution requires an explicit user confirmation.
Audited by: claude

Jul 13, 2026, 02:02 PM

Forty static alerts are false positives caused by Markdown fences, inline code, fixed documentation links, and GitHub metadata. One command is confirmed because SKILL.md instructs the agent to run a Resend connector that can perform a live suppression mutation.

1
Files scanned
88
Lines analyzed
4
Review items
0
False positives ignored
Capability review items (1)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium
Ruby/shell backtick execution
**Zero-dependency ESP sync (when Resend is the ESP)**: `python3 "${CLAUDE_PLUGIN_ROOT}/scripts/conne
Line 52 explicitly invokes a Python Resend connector and documents --live suppression. This executes an external program and can mutate remote subscriber state.
Audited by: codex

Jul 13, 2026, 02:02 PM

Forty static alerts are false positives caused by Markdown fences, inline code, fixed documentation links, and GitHub metadata. One command is confirmed because SKILL.md instructs the agent to run a Resend connector that can perform a live suppression mutation.

1
Files scanned
88
Lines analyzed
4
Review items
0
False positives ignored
Capability review items (1)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium
Ruby/shell backtick execution
**Zero-dependency ESP sync (when Resend is the ESP)**: `python3 "${CLAUDE_PLUGIN_ROOT}/scripts/conne
Line 52 explicitly invokes a Python Resend connector and documents --live suppression. This executes an external program and can mutate remote subscriber state.
Audited by: codex

Jul 12, 2026, 12:55 PM

Forty static alerts are false positives caused by Markdown fences, inline code, metadata URLs, and fixed relative links. One connector command is confirmed, and its live suppression mode lacks explicit per-action approval.

1
Files scanned
88
Lines analyzed
5
Review items
0
False positives ignored

Confirmed security concerns (1)

Medium
Live ESP Mutation Lacks Explicit Confirmation
The workflow offers --live suppression of an external contact without requiring immediate user approval before the platform change.
Line 52 explicitly distinguishes dry-run from --live execution but does not require per-action confirmation. The command changes a contact's subscription state.
Capability review items (1)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium
Ruby/shell backtick execution
**Zero-dependency ESP sync (when Resend is the ESP)**: `python3 "${CLAUDE_PLUGIN_ROOT}/scripts/conne
Line 52 explicitly instructs execution of a Python connector and provides a --live mutation path. This is genuine external command use with platform side effects.
Audited by: codex

Jul 6, 2026, 05:50 PM

Most static findings are false positives from Markdown code fences, inline file paths, and relative documentation links. One external command is confirmed because line 52 documents a Python connector command that can perform live Resend suppression with --live. No prompt injection or data-exfiltration intent was found in SKILL.md.

1
Files scanned
88
Lines analyzed
5
Review items
0
False positives ignored

Confirmed security concerns (1)

Medium
Live ESP Contact Suppression Side Effect
Line 52 documents a Resend suppress command with --live that can change contact subscription state. This is legitimate but account-impacting without explicit confirmation.
The command and --live flag are explicit, and the text says it pushes suppression to the platform. The skill also states dry-run defaults, which lowers severity.
Capability review items (1)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium
Ruby/shell backtick execution
**Zero-dependency ESP sync (when Resend is the ESP)**: `python3 "${CLAUDE_PLUGIN_ROOT}/scripts/conne
Line 52 instructs running python3 with a connector script and includes a --live suppress command. This is a real external-command path with live ESP side effects, although it is scoped to Resend.
Audited by: codex

Jul 4, 2026, 04:14 PM

Most static findings are Markdown false positives from code fences, inline path literals, or relative repository links. One real medium-risk issue remains: the Resend connector command can read ESP data and mutate suppression state when run with --live, although the skill documents dry-run behavior. No prompt injection attempt or malicious exfiltration intent was found in SKILL.md.

1
Files scanned
88
Lines analyzed
4
Review items
0
False positives ignored
Capability review items (1)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium
Ruby/shell backtick execution
**Zero-dependency ESP sync (when Resend is the ESP)**: `python3 "${CLAUDE_PLUGIN_ROOT}/scripts/conne
Line 52 instructs running a Python connector and a live Resend suppression command. The command is documented as dry-run by default, but --live can mutate ESP contact state.
Audited by: codex