Audit History

Most alerts are false positives caused by Markdown links, code fences, placeholders, and metadata URLs. However, SKILL.md line 58 directs execution of an out-of-package Python connector and use of environment-held API credentials. Publication should require connector review, explicit network consent, and documented credential handling.

Most alerts are false positives caused by Markdown links, code fences, placeholders, and metadata URLs. However, SKILL.md line 58 directs execution of an out-of-package Python connector and use of environment-held API credentials. Publication should require connector review, explicit network consent, and documented credential handling.

Most findings are false positives caused by Markdown links, code fences, placeholders, and homepage metadata. One medium issue remains: the skill instructs the agent to run an optional Python YouTube connector from CLAUDE_PLUGIN_ROOT, which is legitimate but still external command execution. No prompt injection, data-exfiltration intent, or malicious override text was found in the reviewed files.

Most static findings are false positives caused by Markdown links, code fences, placeholder notation, and fixed memory paths. The confirmed risks are the optional YouTube connector command and its use of YOUTUBE_API_KEY. No prompt injection or malicious data-exfiltration intent was found.

Most findings are false positives caused by Markdown links, code fences, placeholders, and homepage metadata. One medium issue remains: the skill instructs the agent to run an optional Python YouTube connector from CLAUDE_PLUGIN_ROOT, which is legitimate but still external command execution. No prompt injection, data-exfiltration intent, or malicious override text was found in the reviewed files.

The static analyzer produced many high-severity path traversal and command-pattern hits, but most are Markdown links, templates, metadata, or placeholder labels. The retained risks are the documented YouTube connector command and its API-key dependency, which are legitimate but require installer visibility because they execute local code and read a secret-bearing environment variable.

Most static findings are false positives caused by Markdown links, code fences, placeholders, and influencer handle examples. One documented connector command is a real external-command risk, and its use of YOUTUBE_API_KEY is a real environment-access risk, but I found no malicious intent or prompt injection.

Most static alerts are false positives from Markdown links, fenced examples, placeholders, and sample creator handles. The confirmed issue is SKILL.md line 58, which instructs agents to run a local YouTube connector and use YOUTUBE_API_KEY. No prompt injection or covert exfiltration intent was found in the reviewed files.

Most static findings are false positives from Markdown links, fenced examples, inline path labels, and homepage metadata. The confirmed risks are limited to a YouTube connector command that runs local Python and may read YOUTUBE_API_KEY; no prompt injection or exfiltration intent was found.

Most static findings are false positives from Markdown links, fenced examples, inline path labels, and homepage metadata. The confirmed risks are limited to a YouTube connector command that runs local Python and may read YOUTUBE_API_KEY; no prompt injection or exfiltration intent was found.

All static findings were reviewed against the cited lines and are false positives. The high filesystem findings are relative Markdown links or workspace memory conventions, the command findings are Markdown examples or bounded connector documentation, and no prompt injection or data-exfiltration intent was found.