Audit History

All 12 static alerts are false positives caused by Markdown fences or benign prose; no Ruby backtick execution or reconnaissance appears. The skill nevertheless presents shell commands that accept unquoted directory placeholders and a plain `mv` example that may overwrite files. These operational risks require safer command construction and collision handling before unattended use.

All static detections were adjudicated as false positives. The external-command matches are Markdown code fences with illustrative shell examples, and the blocker matches are ordinary file naming guidance. No prompt injection, credential access, network calls, or hidden execution logic was found in SKILL.md.

No malicious intent, prompt injection, network exfiltration, or runtime code was found. Static alerts are false positives from Markdown code fences, inline path examples, and ordinary prose in SKILL.md. The skill documents optional local filesystem commands and requires approval before destructive cleanup.

Static analysis flagged many Markdown code fences as Ruby backtick execution, but no Ruby execution was found in SKILL.md. The skill does instruct agents to run shell commands and move files, so it is a legitimate productivity skill with medium operational risk. Weak crypto and reconnaissance alerts at the reported lines are false positives; the only MD5 usage is for duplicate detection, not security.

This skill is a documentation-only resource providing instructions for file organization tasks. Static analysis flagged 71 patterns (md5 usage, shell commands), but all are false positives - they are instructional examples in markdown code blocks, not executable code. The skill teaches users to run standard file system commands like find, mv, and mkdir. No malicious intent detected.

AI analysis failed after multiple attempts - MANUAL REVIEW REQUIRED before publishing. This skill cannot be auto-published until reviewed by a human.

AI analysis failed after multiple attempts - MANUAL REVIEW REQUIRED before publishing. This skill cannot be auto-published until reviewed by a human.

This is a prompt-based skill containing only natural language instructions for the AI. No executable code, scripts, network calls, or direct filesystem access patterns are present. The skill relies on the AI's built-in tools and requires explicit user consent before any file operations.

This is a prompt-based skill containing only natural language instructions for the AI. No executable code, scripts, network calls, or direct filesystem access patterns are present. The skill relies on the AI's built-in tools and requires explicit user consent before any file operations.

This is a prompt-based skill containing only natural language instructions for the AI. No executable code, scripts, network calls, or direct filesystem access patterns are present. The skill relies on the AI's built-in tools and requires explicit user consent before any file operations.