Audit History
arxiv-search - 8 audits
Version comparison
Capability and finding changes across audited versions, newest first.
| Version | Date | Result | Review items | Change vs previous |
|---|---|---|---|---|
| v8 Latest | Jul 5, 2026, 12:34 PM | No confirmed findings | 0 | No capability change |
| v7 | Jul 5, 2026, 12:34 PM | No confirmed findings | 0 | Contains scriptsNetwork access |
| v6 | Jun 29, 2026, 08:41 PM | 2 confirmed | 0 | Contains scriptsExternal commands |
| v5 | Jan 17, 2026, 04:08 AM | No confirmed findings | 0 | No capability change |
| v4 | Jan 17, 2026, 04:08 AM | No confirmed findings | 0 | No capability change |
| v3 | Jan 10, 2026, 02:15 PM | No confirmed findings | 0 | No capability change |
| v2 | Jan 10, 2026, 02:15 PM | No confirmed findings | 0 | No capability change |
| v1 | Jan 10, 2026, 02:15 PM | No confirmed findings | 0 | Baseline |
Jul 5, 2026, 12:34 PM
The static findings are false positives caused by Markdown inline code and fenced code examples in SKILL.md. I found no prompt injection, social engineering, credential access, or malicious intent in the reviewed skill files.
Risk Factors
⚙️ External commands (9)
Jul 5, 2026, 12:34 PM
The static findings are false positives caused by Markdown inline code and fenced code examples in SKILL.md. I found no prompt injection, social engineering, credential access, or malicious intent in the reviewed skill files.
Risk Factors
⚙️ External commands (9)
Jun 29, 2026, 08:41 PM
Static weak cryptography findings are false positives: the cited lines contain descriptive text or argparse metadata, not cryptographic code. The external command findings are mostly markdown code formatting and a documented pip install command, while the real publish-time concern is legitimate network access to arXiv through a Python script.
Confirmed security concerns (2)
Static false positives ignored (2)
These static matches were dismissed by semantic review or matched schema-only tokens, so they are shown for transparency but do not drive the quality score.
Risk Factors
⚡ Contains scripts (1)
🌐 Network access (2)
⚙️ External commands (3)
Jan 17, 2026, 04:08 AM
This is a read-only research tool that queries the public arXiv API. The code makes no file system modifications, executes no external commands, accesses no environment variables, and sends no data to unauthorized endpoints. Static findings are false positives from the scanner misinterpreting markdown code blocks as shell backticks and argparse descriptions as cryptographic algorithms.
Risk Factors
🌐 Network access (1)
Jan 17, 2026, 04:08 AM
This is a read-only research tool that queries the public arXiv API. The code makes no file system modifications, executes no external commands, accesses no environment variables, and sends no data to unauthorized endpoints. Static findings are false positives from the scanner misinterpreting markdown code blocks as shell backticks and argparse descriptions as cryptographic algorithms.
Risk Factors
🌐 Network access (1)
Jan 10, 2026, 02:15 PM
Simple read-only search tool that queries the legitimate arXiv API. No file system access, no environment variables, no external commands, no data exfiltration. Purpose exactly matches behavior.
Risk Factors
🌐 Network access (1)
Jan 10, 2026, 02:15 PM
Simple read-only search tool that queries the legitimate arXiv API. No file system access, no environment variables, no external commands, no data exfiltration. Purpose exactly matches behavior.
Risk Factors
🌐 Network access (1)
Jan 10, 2026, 02:15 PM
Simple read-only search tool that queries the legitimate arXiv API. No file system access, no environment variables, no external commands, no data exfiltration. Purpose exactly matches behavior.