Audit History

Static analysis reported many external command hits plus weak cryptography and network reconnaissance indicators. Manual review found the weak cryptography and network reconnaissance indicators are false positives from Markdown text, while the external commands are legitimate dotnet test examples. Risk is medium because the skill directs agents to execute local test projects, which can run repository code and start Playwright resources.

Documentation-only skill containing test execution instructions. Contains bash command examples for running TUnit tests with Playwright. No executable code, no network calls, no file system access beyond standard documentation. Pure prompt-based skill with safe behavior matching stated purpose. All 47 static findings are false positives from pattern matching on documentation text.

Documentation-only skill containing test execution instructions. Contains bash command examples for running TUnit tests with Playwright. No executable code, no network calls, no file system access beyond standard documentation. Pure prompt-based skill with safe behavior matching stated purpose. All 47 static findings are false positives from pattern matching on documentation text.

Documentation-only skill containing test execution instructions. No executable code, no network calls, no file system access beyond documentation. Pure prompt-based skill with safe behavior matching stated purpose.

Documentation-only skill containing test execution instructions. No executable code, no network calls, no file system access beyond documentation. Pure prompt-based skill with safe behavior matching stated purpose.

Documentation-only skill containing test execution instructions. No executable code, no network calls, no file system access beyond documentation. Pure prompt-based skill with safe behavior matching stated purpose.