📦

Audit History

devflow-constitution-quick-ref - 6 audits

Audit version 6

Latest Safe

Jan 21, 2026, 05:56 PM

Pure documentation skill containing only markdown reference material for CC-DevFlow Constitution. Static scanner detected patterns in markdown code examples as security risks, but all findings are false positives. The skill has no executable code, network calls, or file system operations. All 58 static findings were evaluated and dismissed as documentation artifacts.

2
Files scanned
990
Lines analyzed
0
findings
claude
Audited by
No security issues found

Audit version 5

Medium Risk

Jan 17, 2026, 04:33 AM

AI analysis failed after multiple attempts - MANUAL REVIEW REQUIRED before publishing. This skill cannot be auto-published until reviewed by a human.

2
Files scanned
550
Lines analyzed
4
findings
claude
Audited by
No security issues found

Detected Patterns

Hardcoded URLHidden file accessWeak cryptographic algorithmRuby/shell backtick executiondotenv libraryGeneric API/secret keysEnvironment file accessSystem reconnaissance[HEURISTIC] DANGEROUS COMBINATION: Code execution + Network + Credential access[HEURISTIC] SUSPICIOUS COMBINATION: Filesystem + Credentials + Network

Audit version 4

Medium Risk

Jan 17, 2026, 04:33 AM

AI analysis failed after multiple attempts - MANUAL REVIEW REQUIRED before publishing. This skill cannot be auto-published until reviewed by a human.

2
Files scanned
550
Lines analyzed
4
findings
claude
Audited by
No security issues found

Detected Patterns

Hardcoded URLHidden file accessWeak cryptographic algorithmRuby/shell backtick executiondotenv libraryGeneric API/secret keysEnvironment file accessSystem reconnaissance[HEURISTIC] DANGEROUS COMBINATION: Code execution + Network + Credential access[HEURISTIC] SUSPICIOUS COMBINATION: Filesystem + Credentials + Network

Audit version 3

Safe

Jan 10, 2026, 02:06 PM

Pure documentation skill containing only markdown reference content. No executable code, no network operations, no file system modifications, and no external command execution. This is a read-only knowledge base for CC-DevFlow constitution rules.

1
Files scanned
375
Lines analyzed
0
findings
claude
Audited by
No security issues found

Audit version 2

Safe

Jan 10, 2026, 02:06 PM

Pure documentation skill containing only markdown reference content. No executable code, no network operations, no file system modifications, and no external command execution. This is a read-only knowledge base for CC-DevFlow constitution rules.

1
Files scanned
375
Lines analyzed
0
findings
claude
Audited by
No security issues found

Audit version 1

Safe

Jan 10, 2026, 02:06 PM

Pure documentation skill containing only markdown reference content. No executable code, no network operations, no file system modifications, and no external command execution. This is a read-only knowledge base for CC-DevFlow constitution rules.

1
Files scanned
375
Lines analyzed
0
findings
claude
Audited by
No security issues found