Audit History

All 18 static findings are false positives. The URLs are comments, test fixtures, or repository metadata, and the backticks are Markdown code spans. Temporary directories support isolated tests, while entropy signals reflect plain UTF-8 Chinese text rather than encoded payloads.

All 18 static findings are false positives caused by examples, test-only temporary files, Markdown code formatting, Unicode regex ranges, and Chinese UTF-8 text. No prompt injection, encoded payload, unauthorized network request, or command execution was found.

All 17 static findings are false positives. The alerts come from documentation examples, Unicode matching, isolated tests, Markdown formatting, and entropy heuristics on plain UTF-8 Chinese text. No unsafe network request, command execution primitive, encrypted payload, prompt injection attempt, or data-exfiltration intent was found.