Audit History

The static findings are false positives caused by Markdown code fences, inline code examples, example paths, and validator messages. No prompt injection, credential exfiltration, or malicious command execution was found. The remaining concern is broad pre-approved Write, Edit, and Bash access in a community skill.

The static findings are false positives caused by Markdown code fences, inline code examples, example paths, and validator messages. No prompt injection, credential exfiltration, or malicious command execution was found. The remaining concern is broad pre-approved Write, Edit, and Bash access in a community skill.

Static analysis reported many high-risk patterns, but review found the weak-crypto and Ruby backtick alerts are false positives from Markdown examples, validation text, and product terminology. The confirmed risk is medium because the skill pre-approves Write, Edit, and Bash for a community skill and includes a local validator script that reads user-supplied paths. No evidence found of network access, credential exfiltration, destructive commands, or prompt injection attempts.

AI analysis failed after multiple attempts - MANUAL REVIEW REQUIRED before publishing. This skill cannot be auto-published until reviewed by a human.

AI analysis failed after multiple attempts - MANUAL REVIEW REQUIRED before publishing. This skill cannot be auto-published until reviewed by a human.

The skill has a validation script and bash execution capability, but both are controlled and serve legitimate purposes for skill development. No network calls, no credential access, no persistence mechanisms, and no obfuscated code. Risk is appropriate for its development-focused purpose.

The skill has a validation script and bash execution capability, but both are controlled and serve legitimate purposes for skill development. No network calls, no credential access, no persistence mechanisms, and no obfuscated code. Risk is appropriate for its development-focused purpose.

The skill has a validation script and bash execution capability, but both are controlled and serve legitimate purposes for skill development. No network calls, no credential access, no persistence mechanisms, and no obfuscated code. Risk is appropriate for its development-focused purpose.