Audit History

All 31 static findings are false positives caused by Markdown fences, TypeScript template literals, an illustrative relative API request, public documentation links, and a section heading. The skill is documentation-only and contains no prompt injection, command execution, credential access, or data-exfiltration intent.

All 31 static detections are false positives caused by Markdown code fences, educational React Native examples, and documentation links. The skill contains no executable shell commands, dynamic untrusted code loading, credential handling, or evidence of prompt injection. No semantic security concerns were identified.

All 31 static detections are false positives caused by Markdown code fences, educational React Native examples, and documentation links. The skill contains no executable shell commands, dynamic untrusted code loading, credential handling, or evidence of prompt injection. No semantic security concerns were identified.

All 31 static detections are false positives caused by Markdown code fences, educational React Native examples, and documentation links. The skill contains no executable shell commands, dynamic untrusted code loading, credential handling, or evidence of prompt injection. No semantic security concerns were identified.

All static findings were adjudicated as false positives in a Markdown documentation skill. The flagged patterns are TypeScript examples, Markdown code fences, a relative fetch example, and resource links; no prompt injection, data exfiltration intent, or executable automation was found.

All static findings were adjudicated as false positives in a Markdown documentation skill. The flagged patterns are TypeScript examples, Markdown code fences, a relative fetch example, and resource links; no prompt injection, data exfiltration intent, or executable automation was found.

Static analysis found command execution, script, network, weak crypto, and reconnaissance patterns, but review shows they are false positives in Markdown documentation and React Native examples. The skill allows only Read, Write, and Edit tools and contains no prompt injection, executable helper scripts, credential access, or data exfiltration logic. It is safe to publish with low residual risk from benign code examples that mention fetch and dynamic imports.

Pure documentation skill containing React Native coding patterns. All static findings are false positives caused by the scanner misinterpreting code examples and documentation syntax as security issues. The skill has minimal tool permissions (Read, Write, Edit), contains no executable code, and poses no security risk.

Pure documentation skill containing React Native coding patterns. All static findings are false positives caused by the scanner misinterpreting code examples and documentation syntax as security issues. The skill has minimal tool permissions (Read, Write, Edit), contains no executable code, and poses no security risk.

Pure documentation skill containing React Native coding patterns and best practices. Uses minimal tool permissions (Read, Write, Edit) appropriate for code guidance. No network access, no scripts, no code execution, no suspicious capabilities.

Pure documentation skill containing React Native coding patterns and best practices. Uses minimal tool permissions (Read, Write, Edit) appropriate for code guidance. No network access, no scripts, no code execution, no suspicious capabilities.

Pure documentation skill containing React Native coding patterns and best practices. Uses minimal tool permissions (Read, Write, Edit) appropriate for code guidance. No network access, no scripts, no code execution, no suspicious capabilities.