Audit History
rank-tracker - 7 audits
Version comparison
Capability and finding changes across audited versions, newest first.
| Version | Date | Result | Review items | Change vs previous |
|---|---|---|---|---|
| v7 Latest | Jul 12, 2026, 01:41 PM | No confirmed findings | 1 | No capability change |
| v6 | Jul 12, 2026, 01:41 PM | No confirmed findings | 1 | No capability change |
| v5 | Jul 10, 2026, 11:44 AM | No confirmed findings | 1 | No capability change |
| v4 | Jul 9, 2026, 12:23 PM | No confirmed findings | 1 | No capability change |
| v3 | Jul 6, 2026, 06:44 PM | No confirmed findings | 1 | No capability change |
| v2 | Jul 6, 2026, 06:44 PM | No confirmed findings | 1 | No capability change |
| v1 | Jul 4, 2026, 04:16 PM | No confirmed findings | 0 | Baseline |
Jul 12, 2026, 01:41 PM
One medium-risk command invocation is confirmed because it directs execution of an external Python script with an unquoted domain placeholder. The other findings are false positives caused by Markdown syntax, metadata URLs, relative documentation links, and ordinary prose.
Capability review items (1)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Risk Factors
⚙️ External commands (8)
🌐 Network access (2)
📁 Filesystem access (6)
Jul 12, 2026, 01:41 PM
One medium-risk command invocation is confirmed because it directs execution of an external Python script with an unquoted domain placeholder. The other findings are false positives caused by Markdown syntax, metadata URLs, relative documentation links, and ordinary prose.
Capability review items (1)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Risk Factors
⚙️ External commands (8)
🌐 Network access (2)
📁 Filesystem access (6)
Jul 10, 2026, 11:44 AM
Sixteen findings are false positives caused by Markdown fences, inline code, metadata URLs, and relative documentation links. The shell template on SKILL.md line 49 is confirmed because it executes an external Python script while leaving the domain placeholder unquoted, creating command-injection risk if substituted through a shell. No prompt injection or malicious data-exfiltration intent was found.
Capability review items (1)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Risk Factors
⚙️ External commands (8)
🌐 Network access (2)
📁 Filesystem access (6)
Jul 9, 2026, 12:23 PM
The audit confirmed one real external-command concern: SKILL.md line 49 instructs agents to run a Python ledger command with user-provided domain and keyword data. The remaining code-fence, URL, and relative-link findings are documentation false positives. I found no prompt injection or hidden data-exfiltration intent in the reviewed SKILL.md content.
Capability review items (1)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Risk Factors
⚙️ External commands (8)
🌐 Network access (2)
📁 Filesystem access (6)
Jul 6, 2026, 06:44 PM
Most static findings are markdown formatting, metadata URLs, or documentation links rather than executable behavior. SKILL.md line 49 defines a real ledger command with user-controlled inputs. It should require explicit permission and safe argument handling; I found no prompt injection or exfiltration intent.
Capability review items (1)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Risk Factors
⚙️ External commands (8)
🌐 Network access (2)
📁 Filesystem access (6)
Jul 6, 2026, 06:44 PM
Most static findings are markdown formatting, metadata URLs, or documentation links rather than executable behavior. SKILL.md line 49 defines a real ledger command with user-controlled inputs. It should require explicit permission and safe argument handling; I found no prompt injection or exfiltration intent.
Capability review items (1)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Risk Factors
⚙️ External commands (8)
🌐 Network access (2)
📁 Filesystem access (6)
Jul 4, 2026, 04:16 PM
The static findings are false positives caused by Markdown code fences, inline code formatting, relative documentation links, and repository homepage URLs. I found no evidence in SKILL.md of prompt injection, credential access, data exfiltration, malicious path traversal, or host reconnaissance. The optional local ledger command should still be governed by the host command-execution policy.