Audit History
reactivation-specialist - 6 audits
Version comparison
Capability and finding changes across audited versions, newest first.
| Version | Date | Result | Review items | Change vs previous |
|---|---|---|---|---|
| v6 Latest | Jul 27, 2026, 11:41 AM | No confirmed findings | 1 | No capability change |
| v5 | Jul 13, 2026, 02:41 PM | No confirmed findings | 0 | No capability change |
| v4 | Jul 13, 2026, 02:41 PM | No confirmed findings | 0 | No capability change |
| v3 | Jul 12, 2026, 01:44 PM | No confirmed findings | 0 | No capability change |
| v2 | Jul 6, 2026, 06:48 PM | No confirmed findings | 0 | No capability change |
| v1 | Jul 4, 2026, 04:28 PM | No confirmed findings | 0 | Baseline |
Jul 27, 2026, 11:41 AM
Most static findings are false positives from Markdown backticks and relative documentation links. One confirmed issue remains: the save instruction uses a user-derived cohort-or-goal placeholder without requiring filename sanitization or path containment. The skill otherwise instructs the agent to treat imported data as untrusted and requires user confirmation before saving.
Capability review items (1)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Risk Factors
⚙️ External commands (13)
🌐 Network access (2)
📁 Filesystem access (25)
🔑 Env variables (1)
Jul 13, 2026, 02:41 PM
All 41 static findings are false positives caused by Markdown fences, inline code, metadata URLs, and relative documentation links. SKILL.md contains no executable commands, network requests, environment access, or unsafe path construction; its fixed workspace save occurs only after user confirmation.
Risk Factors
⚙️ External commands (13)
🌐 Network access (2)
📁 Filesystem access (25)
🔑 Env variables (1)
Jul 13, 2026, 02:41 PM
All 41 static findings are false positives caused by Markdown fences, inline code, metadata URLs, and relative documentation links. SKILL.md contains no executable commands, network requests, environment access, or unsafe path construction; its fixed workspace save occurs only after user confirmation.
Risk Factors
⚙️ External commands (13)
🌐 Network access (2)
📁 Filesystem access (25)
🔑 Env variables (1)
Jul 12, 2026, 01:44 PM
All 41 static findings are false positives caused by Markdown code fences, inline code, repository links, and relative documentation references. The skill contains no executable commands, active network requests, environment access, path construction, prompt injection, or malicious intent.
Risk Factors
⚙️ External commands (13)
🌐 Network access (2)
📁 Filesystem access (25)
🔑 Env variables (1)
Jul 6, 2026, 06:48 PM
All static findings are false positives caused by Markdown fences, inline code, metadata URLs, and local documentation links. No prompt injection, command execution, network exfiltration, environment access, or unsafe filesystem behavior was found.
Risk Factors
⚙️ External commands (11)
🌐 Network access (2)
📁 Filesystem access (25)
🔑 Env variables (1)
Jul 4, 2026, 04:28 PM
All 39 static findings are false positives caused by Markdown code fences, inline code formatting, metadata URLs, and relative documentation links. No prompt injection, executable code, credential access, data exfiltration, or unauthorized filesystem behavior was found in SKILL.md.