📦

Audit History

claude-opus-4-5-migration - 10 audits

Version comparison

Capability and finding changes across audited versions, newest first.

VersionDateResultReview itemsChange vs previous
v10 LatestJul 23, 2026, 12:26 PM No confirmed findings0No capability change
v9 Jul 8, 2026, 12:40 AM No confirmed findings0No capability change
v8 Jul 6, 2026, 06:14 AM No confirmed findings0External commands
v7 Jun 28, 2026, 10:07 PM No confirmed findings0No capability change
v6 Jan 21, 2026, 02:51 PM No confirmed findings0 External commands
v5 Jan 16, 2026, 08:37 PM No confirmed findings0No capability change
v4 Jan 16, 2026, 08:37 PM No confirmed findings0External commands
v3 Jan 9, 2026, 02:54 PM No confirmed findings0No capability change
v2 Jan 9, 2026, 02:54 PM No confirmed findings0No capability change
v1 Jan 9, 2026, 02:54 PM No confirmed findings0Baseline

Jul 23, 2026, 12:26 PM

All 30 static findings are false positives. The six blocker matches are ordinary coding and design guidance, while the 24 command matches are Markdown delimiters, identifiers, or reference links with no execution behavior. No prompt injection or other semantic security risk was found.

3
Files scanned
284
Lines analyzed
1
Review items
0
False positives ignored
Audited by: codex

Jul 8, 2026, 12:40 AM

All 30 static findings were adjudicated as false positives. The SKILL.md matches are Markdown formatting and example model strings, while the prompt-snippet matches are migration guidance rather than reconnaissance or prompt injection.

3
Files scanned
284
Lines analyzed
1
Review items
0
False positives ignored
Audited by: codex

Jul 6, 2026, 06:14 AM

All static findings were adjudicated as false positives. The external command hits are markdown backticks, code fences, model identifiers, and prompt examples, not executable shell calls. The reconnaissance hits are prompt migration snippets with no evidence of prompt injection, data exfiltration, or host inspection intent.

3
Files scanned
284
Lines analyzed
1
Review items
0
False positives ignored
Audited by: codex

Jun 28, 2026, 10:07 PM

Official Anthropic skill with documentation-only migration guidance and no executable scripts. Static external-command indicators are false positives from code examples and prompt text, not operational command execution.

3
Files scanned
284
Lines analyzed
0
Review items
0
False positives ignored
No confirmed security findings were recorded for this completed audit.
Audited by: codex

Jan 21, 2026, 02:51 PM

Official Anthropic skill for safe migration between Claude models. Performs only text-based replacements in user code. No dynamic execution, no external dependencies, no network calls. Risk factors detected are false positives from static analysis of markdown documentation.

4
Files scanned
1,296
Lines analyzed
0
Review items
0
False positives ignored
No confirmed security findings were recorded for this completed audit.
Audited by: claude

Jan 16, 2026, 08:37 PM

AI analysis failed after multiple attempts - MANUAL REVIEW REQUIRED before publishing. This skill cannot be auto-published until reviewed by a human.

4
Files scanned
474
Lines analyzed
1
Review items
0
False positives ignored

Risk Factors

⚙️ External commands (75)
references/effort.md:3 references/effort.md:11 references/effort.md:12 references/effort.md:13 references/effort.md:17 references/effort.md:20-30 references/effort.md:30-33 references/effort.md:33-43 references/effort.md:43-46 references/effort.md:46-56 references/prompt-snippets.md:15 references/prompt-snippets.md:15 references/prompt-snippets.md:16 references/prompt-snippets.md:16 references/prompt-snippets.md:17 references/prompt-snippets.md:17 references/prompt-snippets.md:18 references/prompt-snippets.md:18 references/prompt-snippets.md:28-33 references/prompt-snippets.md:33-43 references/prompt-snippets.md:43-45 references/prompt-snippets.md:45-55 references/prompt-snippets.md:55-73 references/prompt-snippets.md:73-79 references/prompt-snippets.md:79-80 references/prompt-snippets.md:80-85 references/prompt-snippets.md:85-87 references/prompt-snippets.md:87-93 references/prompt-snippets.md:93 references/prompt-snippets.md:93-94 references/prompt-snippets.md:94 references/prompt-snippets.md:94-95 references/prompt-snippets.md:95 references/prompt-snippets.md:95-96 references/prompt-snippets.md:96 references/prompt-snippets.md:96-97 references/prompt-snippets.md:97 references/prompt-snippets.md:97 references/prompt-snippets.md:97-102 references/prompt-snippets.md:102 SKILL.md:15 SKILL.md:15 SKILL.md:25 SKILL.md:27-29 SKILL.md:29-35 SKILL.md:35-36 SKILL.md:36-37 SKILL.md:37-38 SKILL.md:38-44 SKILL.md:44 SKILL.md:44 SKILL.md:44-45 SKILL.md:45 SKILL.md:45 SKILL.md:45-46 SKILL.md:46 SKILL.md:46 SKILL.md:46-48 SKILL.md:48-55 SKILL.md:55 SKILL.md:55-67 SKILL.md:67-68 SKILL.md:68 SKILL.md:68-69 SKILL.md:69 SKILL.md:69-70 SKILL.md:70 SKILL.md:70-71 SKILL.md:71-79 SKILL.md:79-85 SKILL.md:85-91 SKILL.md:91-95 SKILL.md:95-97 SKILL.md:97-103 SKILL.md:103-105

Detected Patterns

Ruby/shell backtick executionWeak cryptographic algorithmSystem reconnaissance
Audited by: claude

Jan 16, 2026, 08:37 PM

AI analysis failed after multiple attempts - MANUAL REVIEW REQUIRED before publishing. This skill cannot be auto-published until reviewed by a human.

4
Files scanned
474
Lines analyzed
1
Review items
0
False positives ignored

Risk Factors

⚙️ External commands (75)
references/effort.md:3 references/effort.md:11 references/effort.md:12 references/effort.md:13 references/effort.md:17 references/effort.md:20-30 references/effort.md:30-33 references/effort.md:33-43 references/effort.md:43-46 references/effort.md:46-56 references/prompt-snippets.md:15 references/prompt-snippets.md:15 references/prompt-snippets.md:16 references/prompt-snippets.md:16 references/prompt-snippets.md:17 references/prompt-snippets.md:17 references/prompt-snippets.md:18 references/prompt-snippets.md:18 references/prompt-snippets.md:28-33 references/prompt-snippets.md:33-43 references/prompt-snippets.md:43-45 references/prompt-snippets.md:45-55 references/prompt-snippets.md:55-73 references/prompt-snippets.md:73-79 references/prompt-snippets.md:79-80 references/prompt-snippets.md:80-85 references/prompt-snippets.md:85-87 references/prompt-snippets.md:87-93 references/prompt-snippets.md:93 references/prompt-snippets.md:93-94 references/prompt-snippets.md:94 references/prompt-snippets.md:94-95 references/prompt-snippets.md:95 references/prompt-snippets.md:95-96 references/prompt-snippets.md:96 references/prompt-snippets.md:96-97 references/prompt-snippets.md:97 references/prompt-snippets.md:97 references/prompt-snippets.md:97-102 references/prompt-snippets.md:102 SKILL.md:15 SKILL.md:15 SKILL.md:25 SKILL.md:27-29 SKILL.md:29-35 SKILL.md:35-36 SKILL.md:36-37 SKILL.md:37-38 SKILL.md:38-44 SKILL.md:44 SKILL.md:44 SKILL.md:44-45 SKILL.md:45 SKILL.md:45 SKILL.md:45-46 SKILL.md:46 SKILL.md:46 SKILL.md:46-48 SKILL.md:48-55 SKILL.md:55 SKILL.md:55-67 SKILL.md:67-68 SKILL.md:68 SKILL.md:68-69 SKILL.md:69 SKILL.md:69-70 SKILL.md:70 SKILL.md:70-71 SKILL.md:71-79 SKILL.md:79-85 SKILL.md:85-91 SKILL.md:91-95 SKILL.md:95-97 SKILL.md:97-103 SKILL.md:103-105

Detected Patterns

Ruby/shell backtick executionWeak cryptographic algorithmSystem reconnaissance
Audited by: claude

Jan 9, 2026, 02:54 PM

Official Anthropic skill containing only documentation and migration guidance. No executable code, network operations, or filesystem modifications. Safe for publishing.

3
Files scanned
284
Lines analyzed
0
Review items
0
False positives ignored
No confirmed security findings were recorded for this completed audit.
Audited by: claude

Jan 9, 2026, 02:54 PM

Official Anthropic skill containing only documentation and migration guidance. No executable code, network operations, or filesystem modifications. Safe for publishing.

3
Files scanned
284
Lines analyzed
0
Review items
0
False positives ignored
No confirmed security findings were recorded for this completed audit.
Audited by: claude

Jan 9, 2026, 02:54 PM

Official Anthropic skill containing only documentation and migration guidance. No executable code, network operations, or filesystem modifications. Safe for publishing.

3
Files scanned
284
Lines analyzed
0
Review items
0
False positives ignored
No confirmed security findings were recorded for this completed audit.
Audited by: claude