Audit History

Most alerts are false positives caused by SQLModel Session.exec and Markdown fences; they do not invoke Python, processes, or shells. The production example retains a default database credential, and generic repository writes accept unrestricted model fields.

All 37 static findings are false positives. The apparent exec calls are SQLModel database-session methods, and the apparent shell executions are Markdown fences. The skill presents database implementation examples and contains no evidence of prompt injection, credential exfiltration, shell execution, or malicious intent.

All 37 static findings are false positives. The apparent exec calls are SQLModel database-session methods, and the apparent shell executions are Markdown fences. The skill presents database implementation examples and contains no evidence of prompt injection, credential exfiltration, shell execution, or malicious intent.

All 37 static findings are false positives. The apparent exec calls are SQLModel database-session methods, and the apparent shell executions are Markdown fences. The skill presents database implementation examples and contains no evidence of prompt injection, credential exfiltration, shell execution, or malicious intent.

The static alerts are false positives caused by documentation examples and Markdown code fences in SKILL.md. SQLModel Session.exec calls are ORM query execution, not Python code execution or process execution. No evidence of prompt injection, data exfiltration, malicious execution, or packaged sensitive data was found.

The static alerts are false positives caused by documentation examples and Markdown code fences in SKILL.md. SQLModel Session.exec calls are ORM query execution, not Python code execution or process execution. No evidence of prompt injection, data exfiltration, malicious execution, or packaged sensitive data was found.

The static high-risk results are mostly false positives from Markdown code fences, SQL text, and method names such as execute. No prompt injection, network exfiltration, install hook, or malicious runtime behavior was found, but database URL handling and raw SQL examples need publication warnings.

This skill is pure documentation (SKILL.md only) containing database best practices and code examples. Static findings are false positives - the scanner detects SQLAlchemy's session.exec() method as Python exec(), database URLs in documentation as credential exposure, and hardcoded example strings as malicious patterns. No executable code, no network calls, no file operations exist in this skill.

This skill is pure documentation (SKILL.md only) containing database best practices and code examples. Static findings are false positives - the scanner detects SQLAlchemy's session.exec() method as Python exec(), database URLs in documentation as credential exposure, and hardcoded example strings as malicious patterns. No executable code, no network calls, no file operations exist in this skill.

Pure documentation skill containing only markdown content with code examples. No executable code, scripts, network calls, or file system access. This is informational content designed to guide database implementation patterns.

Pure documentation skill containing only markdown content with code examples. No executable code, scripts, network calls, or file system access. This is informational content designed to guide database implementation patterns.

Pure documentation skill containing only markdown content with code examples. No executable code, scripts, network calls, or file system access. This is informational content designed to guide database implementation patterns.