πŸ“¦

Audit History

site-structure-optimizer - 4 audits

Version comparison

Capability and finding changes across audited versions, newest first.

VersionDateResultReview itemsChange vs previous
v4 LatestJul 12, 2026, 02:06 PM No confirmed findings2No capability change
v3 Jul 12, 2026, 02:06 PM No confirmed findings2No capability change
v2 Jul 7, 2026, 05:29 PM 1 confirmed2No capability change
v1 Jul 4, 2026, 04:24 PM No confirmed findings0Baseline

Jul 12, 2026, 02:06 PM

Two findings are confirmed because the skill instructs agents to run Python crawler and link-analysis helpers. All other findings are Markdown formatting, relative documentation links, diagrams, or repository metadata. No prompt injection or malicious intent was found.

6
Files scanned
631
Lines analyzed
5
Review items
0
False positives ignored
Capability review items (2)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium
Ruby/shell backtick execution
- Architecture / seed inventory: `python3 "${CLAUDE_PLUGIN_ROOT}/scripts/connectors/crawl.py" <url>`
This line invokes an external Python crawler against a supplied URL. The command and resulting network crawl have side effects that require explicit user authorization.
Medium
Ruby/shell backtick execution
- Linking metrics: `python3 "${CLAUDE_PLUGIN_ROOT}/scripts/connectors/crawl.py" <url> | python3 "${C
This line runs a crawler and pipes its output into another Python helper. These external processes and network activity are real operational risks.
Audited by: codex

Jul 12, 2026, 02:06 PM

Two findings are confirmed because the skill instructs agents to run Python crawler and link-analysis helpers. All other findings are Markdown formatting, relative documentation links, diagrams, or repository metadata. No prompt injection or malicious intent was found.

6
Files scanned
631
Lines analyzed
5
Review items
0
False positives ignored
Capability review items (2)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium
Ruby/shell backtick execution
- Architecture / seed inventory: `python3 "${CLAUDE_PLUGIN_ROOT}/scripts/connectors/crawl.py" <url>`
This line invokes an external Python crawler against a supplied URL. The command and resulting network crawl have side effects that require explicit user authorization.
Medium
Ruby/shell backtick execution
- Linking metrics: `python3 "${CLAUDE_PLUGIN_ROOT}/scripts/connectors/crawl.py" <url> | python3 "${C
This line runs a crawler and pipes its output into another Python helper. These external processes and network activity are real operational risks.
Audited by: codex

Jul 7, 2026, 05:29 PM

Most static findings are false positives caused by markdown links, tables, Mermaid diagrams, and inline code formatting. The real concern is the crawler helper that accepts a user-provided URL without documented safety controls. No prompt-injection language was found.

6
Files scanned
631
Lines analyzed
6
Review items
0
False positives ignored

Confirmed security concerns (1)

Medium
Unrestricted URL Crawling Target
The skill suggests live crawler helpers for a user-provided URL without documenting URL validation, authorization checks, private-network blocking, or rate limits. In an agent host with network access, this could be abused for unintended crawling or internal network probing.
SKILL.md explicitly says it can use a web crawler and gives crawl.py commands for a URL. Nearby instructions do not define URL safety limits.
Capability review items (2)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium
Ruby/shell backtick execution
- Architecture / seed inventory: `python3 "${CLAUDE_PLUGIN_ROOT}/scripts/connectors/crawl.py" <url>`
This line instructs running local Python crawler helpers against a user-provided URL. It needs explicit consent, URL validation, and command argument safety.
Medium
Ruby/shell backtick execution
- Linking metrics: `python3 "${CLAUDE_PLUGIN_ROOT}/scripts/connectors/crawl.py" <url> | python3 "${C
This line instructs running local Python crawler helpers against a user-provided URL. It needs explicit consent, URL validation, and command argument safety.
Audited by: codex

Jul 4, 2026, 04:24 PM

All 63 static findings were adjudicated as false positives in Markdown documentation. The reviewed files contain SEO structure guidance, relative repository links, Mermaid examples, and optional fixed helper command examples; no prompt injection, exfiltration intent, or unsafe runtime behavior was found.

6
Files scanned
631
Lines analyzed
3
Review items
0
False positives ignored
Audited by: codex