Audit History

All 41 static findings are false positives caused by documentation examples, Markdown code fences, chart terminology, and official Plotly links. No malicious intent, prompt injection, unsafe command execution, unauthorized network activity, or dangerous file handling was found.

The static analyzer raised file write, external command, network, and reconnaissance patterns, but review found documentation examples and reference links only. No prompt injection, credential access, command execution, or hidden network behavior was found in the reviewed files.

All static findings were reviewed and appear to be documentation false positives. The matches are Markdown fences, Plotly examples, local chart export examples, and documentation links rather than executable behavior or data exfiltration. No prompt injection attempt or malicious intent was found in the reviewed files.

Static analysis reported many high and medium alerts, but review found they are documentation false positives from markdown fences and Plotly terminology. No prompt injection, hidden exfiltration, or executable malware behavior was found. The remaining risk is low and limited to documented installs, local exports, CDN use, and external links.

Documentation-only skill containing no executable code. All 318 static findings are FALSE POSITIVES. The skill consists entirely of markdown documentation with Python code examples for the Plotly visualization library. Pattern-based scanner incorrectly flagged markdown code fences (```python) as 'Ruby/shell backtick execution', common documentation words like 'Multiple' as 'C2 keywords', and legitimate documentation URLs as 'Hardcoded URL'. No scripts, network calls, file system access, or code execution capabilities exist in this skill.

Documentation-only skill containing no executable code. All 318 static findings are FALSE POSITIVES. The skill consists entirely of markdown documentation with Python code examples for the Plotly visualization library. Pattern-based scanner incorrectly flagged markdown code fences (```python) as 'Ruby/shell backtick execution', common documentation words like 'Multiple' as 'C2 keywords', and legitimate documentation URLs as 'Hardcoded URL'. No scripts, network calls, file system access, or code execution capabilities exist in this skill.

Documentation-only skill containing no executable code. Content consists entirely of markdown documentation and Python code examples demonstrating Plotly library usage. No scripts, network calls, file system access, or code execution capabilities.

Documentation-only skill containing no executable code. Content consists entirely of markdown documentation and Python code examples demonstrating Plotly library usage. No scripts, network calls, file system access, or code execution capabilities.

Documentation-only skill containing no executable code. Content consists entirely of markdown documentation and Python code examples demonstrating Plotly library usage. No scripts, network calls, file system access, or code execution capabilities.