Audit History
allaymc-plugin-dev - 6 audits
Audit version 6
Latest Low RiskJun 28, 2026, 09:19 AM
Static analysis reported many high-risk patterns, but manual review found they come from LGPL license prose, Markdown code formatting, and legitimate git or Gradle workflow examples. No prompt injection, credential access, data exfiltration, obfuscated code, or malicious network behavior was found in LICENSE, README.md, or SKILL.md. The skill is low risk because it can guide users or agents to run standard development commands and read local reference paths.
Low Risk Issues (4)
Risk Factors
⚙️ External commands (4)
📁 Filesystem access (3)
Audit version 5
SafeJan 16, 2026, 03:04 PM
This is a prompt-only documentation skill containing guidance for AllayMC plugin development. No executable code, scripts, network operations, or file system access beyond the skill's own directory. Static findings are false positives triggered by markdown documentation patterns (backticks in code blocks) and LGPL-2.1 license legal text. The skill reads reference materials via user-initialized git submodules.
Risk Factors
⚙️ External commands (67)
📁 Filesystem access (3)
Audit version 4
SafeJan 16, 2026, 03:04 PM
This is a prompt-only documentation skill containing guidance for AllayMC plugin development. No executable code, scripts, network operations, or file system access beyond the skill's own directory. Static findings are false positives triggered by markdown documentation patterns (backticks in code blocks) and LGPL-2.1 license legal text. The skill reads reference materials via user-initialized git submodules.
Risk Factors
⚙️ External commands (67)
📁 Filesystem access (3)
Audit version 3
SafeJan 10, 2026, 10:15 AM
This is a prompt-only skill containing documentation and guidance for AllayMC plugin development. No executable code, scripts, network operations, or file system access beyond the skill's own directory. References external git submodules that are initialized by the user.
Audit version 2
SafeJan 10, 2026, 10:15 AM
This is a prompt-only skill containing documentation and guidance for AllayMC plugin development. No executable code, scripts, network operations, or file system access beyond the skill's own directory. References external git submodules that are initialized by the user.
Audit version 1
SafeJan 10, 2026, 10:15 AM
This is a prompt-only skill containing documentation and guidance for AllayMC plugin development. No executable code, scripts, network operations, or file system access beyond the skill's own directory. References external git submodules that are initialized by the user.