Skills api-testing Audit History
๐Ÿงช

Audit History

api-testing - 6 audits

Audit version 6

Latest Low Risk

Jan 21, 2026, 04:43 PM

All static findings are false positives. The scanner incorrectly flagged regex functions (re.match/re.search) as weak cryptographic algorithms. Environment variable references and hardcoded URLs are documentation examples for test configuration, not credential exposure. The skill follows standard API testing patterns with no malicious behavior.

3
Files scanned
1,597
Lines analyzed
0
findings
claude
Audited by
No security issues found

Audit version 5

Medium Risk

Jan 16, 2026, 05:17 PM

AI analysis failed after multiple attempts - MANUAL REVIEW REQUIRED before publishing. This skill cannot be auto-published until reviewed by a human.

3
Files scanned
949
Lines analyzed
4
findings
claude
Audited by
No security issues found

Detected Patterns

Weak cryptographic algorithmSystem reconnaissanceHardcoded URLHidden file accessRuby/shell backtick executionEnvironment variable access (dot notation)Environment variable objectDatabase connection stringsEnvironment file accessCertificate/key filesSQLite database file[HEURISTIC] DANGEROUS COMBINATION: Code execution + Network + Credential access[HEURISTIC] SUSPICIOUS COMBINATION: Filesystem + Credentials + Network

Audit version 4

Medium Risk

Jan 16, 2026, 05:17 PM

AI analysis failed after multiple attempts - MANUAL REVIEW REQUIRED before publishing. This skill cannot be auto-published until reviewed by a human.

3
Files scanned
949
Lines analyzed
4
findings
claude
Audited by
No security issues found

Detected Patterns

Weak cryptographic algorithmSystem reconnaissanceHardcoded URLHidden file accessRuby/shell backtick executionEnvironment variable access (dot notation)Environment variable objectDatabase connection stringsEnvironment file accessCertificate/key filesSQLite database file[HEURISTIC] DANGEROUS COMBINATION: Code execution + Network + Credential access[HEURISTIC] SUSPICIOUS COMBINATION: Filesystem + Credentials + Network

Audit version 3

Safe

Jan 10, 2026, 10:50 AM

Pure documentation skill with no executable code. The verify.py script is a read-only validation utility with no network access, no file writes, and no command execution capabilities.

2
Files scanned
762
Lines analyzed
0
findings
claude
Audited by
No security issues found

Audit version 2

Safe

Jan 10, 2026, 10:50 AM

Pure documentation skill with no executable code. The verify.py script is a read-only validation utility with no network access, no file writes, and no command execution capabilities.

2
Files scanned
762
Lines analyzed
0
findings
claude
Audited by
No security issues found

Audit version 1

Safe

Jan 10, 2026, 10:50 AM

Pure documentation skill with no executable code. The verify.py script is a read-only validation utility with no network access, no file writes, and no command execution capabilities.

2
Files scanned
762
Lines analyzed
0
findings
claude
Audited by
No security issues found