📦
Audit History
spec-driven-development - 2 audits
Version comparison
Capability and finding changes across audited versions, newest first.
Audit version 2 Latest
Sep 19, 2026, 01:00 PM
All 26 static findings are false positives. The flagged backticks are Markdown code formatting and inline references in a documentation workflow, not shell execution or system reconnaissance.
1
Files scanned
252
Lines analyzed
1
Review items
0
False positives ignored
Risk Factors
⚙️ External commands (23)
SKILL.md:26-32 SKILL.md:32-46 SKILL.md:46-57 SKILL.md:57-61 SKILL.md:61 SKILL.md:65 SKILL.md:73-80 SKILL.md:80-89 SKILL.md:89-94 SKILL.md:94-97 SKILL.md:97-104 SKILL.md:104-117 SKILL.md:117-148 SKILL.md:148-153 SKILL.md:153-158 SKILL.md:158-166 SKILL.md:166-180 SKILL.md:180 SKILL.md:182 SKILL.md:196 SKILL.md:199-204 SKILL.md:204-208 SKILL.md:208
Audited by: codex
Sep 12, 2026, 11:54 AM
All 26 static findings are false positives caused by Markdown fences, inline code formatting, tables, and workflow prose. No executable shell or Ruby code, prompt injection, or malicious semantic behavior was found.
1
Files scanned
252
Lines analyzed
1
Review items
0
False positives ignored
Risk Factors
⚙️ External commands (23)
SKILL.md:26-32 SKILL.md:32-46 SKILL.md:46-57 SKILL.md:57-61 SKILL.md:61 SKILL.md:65 SKILL.md:73-80 SKILL.md:80-89 SKILL.md:89-94 SKILL.md:94-97 SKILL.md:97-104 SKILL.md:104-117 SKILL.md:117-148 SKILL.md:148-153 SKILL.md:153-158 SKILL.md:158-166 SKILL.md:166-180 SKILL.md:180 SKILL.md:182 SKILL.md:196 SKILL.md:199-204 SKILL.md:204-208 SKILL.md:208
Audited by: codex