Audit History
credits-handler - 8 audits
Version comparison
Capability and finding changes across audited versions, newest first.
| Version | Date | Result | Review items | Change vs previous |
|---|---|---|---|---|
| v8 Latest | Jul 6, 2026, 12:38 AM | No confirmed findings | 0 | No capability change |
| v7 | Jul 6, 2026, 12:38 AM | No confirmed findings | 0 | External commands |
| v6 | Jun 28, 2026, 03:54 AM | No confirmed findings | 0 | External commands |
| v5 | Jan 16, 2026, 02:14 PM | No confirmed findings | 0 | No capability change |
| v4 | Jan 16, 2026, 02:14 PM | No confirmed findings | 0 | External commands |
| v3 | Jan 10, 2026, 09:52 AM | No confirmed findings | 0 | No capability change |
| v2 | Jan 10, 2026, 09:52 AM | No confirmed findings | 0 | No capability change |
| v1 | Jan 10, 2026, 09:52 AM | No confirmed findings | 0 | Baseline |
Jul 6, 2026, 12:38 AM
All static findings are false positives caused by Markdown inline code, code fences, and TypeScript or TSX examples. The scanned files show documentation for credit-system integration, with no shell execution, prompt injection, or data exfiltration intent.
Risk Factors
⚙️ External commands (32)
Jul 6, 2026, 12:38 AM
All static findings are false positives caused by Markdown inline code, code fences, and TypeScript or TSX examples. The scanned files show documentation for credit-system integration, with no shell execution, prompt injection, or data exfiltration intent.
Risk Factors
⚙️ External commands (32)
Jun 28, 2026, 03:54 AM
Static analysis reported many shell execution patterns and two weak cryptography patterns. Manual review found these are false positives from Markdown code spans, fenced TypeScript examples, file path references, and substring matches in prose; no executable shell, cryptography, network, filesystem, or prompt injection behavior was found.
Static false positives ignored (2)
These static matches were dismissed by semantic review or matched schema-only tokens, so they are shown for transparency but do not drive the quality score.
Jan 16, 2026, 02:14 PM
This skill contains only documentation files (SKILL.md and reference.md). There is no executable code, scripts, network operations, or file system access. The static findings are false positives caused by the scanner misinterpreting markdown code fences as shell backtick execution and hash identifiers as C2 keywords. The previous audit correctly assessed this skill as safe.
Risk Factors
⚙️ External commands (49)
Jan 16, 2026, 02:14 PM
This skill contains only documentation files (SKILL.md and reference.md). There is no executable code, scripts, network operations, or file system access. The static findings are false positives caused by the scanner misinterpreting markdown code fences as shell backtick execution and hash identifiers as C2 keywords. The previous audit correctly assessed this skill as safe.
Risk Factors
⚙️ External commands (49)
Jan 10, 2026, 09:52 AM
This skill contains only documentation files (SKILL.md and reference.md). There is no executable code, scripts, network operations, or file system access. The skill provides guidance for implementing a credit system using TypeScript patterns and React hooks.
Jan 10, 2026, 09:52 AM
This skill contains only documentation files (SKILL.md and reference.md). There is no executable code, scripts, network operations, or file system access. The skill provides guidance for implementing a credit system using TypeScript patterns and React hooks.
Jan 10, 2026, 09:52 AM
This skill contains only documentation files (SKILL.md and reference.md). There is no executable code, scripts, network operations, or file system access. The skill provides guidance for implementing a credit system using TypeScript patterns and React hooks.