Audit History

The static backtick detections are false positives because SKILL.md contains Markdown command references, not executable Ruby or shell code. A high-confidence semantic risk remains: several GitLab write operations are documented without an explicit confirmation requirement. No evidence found for prompt injection attempts.

The static backtick detections are false positives because SKILL.md contains Markdown command references, not executable Ruby or shell code. A high-confidence semantic risk remains: several GitLab write operations are documented without an explicit confirmation requirement. No evidence found for prompt injection attempts.

The static Ruby backtick and weak cryptography findings are false positives caused by Markdown command examples and words like description or Desc. The skill is not malicious, but it intentionally guides external glab commands that can modify GitLab resources, trigger CI, and clone repositories, so publication should include an operational risk warning.

Pure documentation skill containing only prompt guidelines and glab command references. Static findings are false positives: SHA-256 hashes flagged as weak crypto (SHA-256 is secure), 'sudo' in package installation docs flagged as privilege escalation (legitimate apt install command), content hashes flagged as C2 keywords (standard Git metadata), backtick notation flagged as shell execution (standard markdown documentation), and git remote detection flagged as reconnaissance (legitimate GitLab detection). No executable code or security risks present.

Pure documentation skill containing only prompt guidelines and glab command references. Static findings are false positives: SHA-256 hashes flagged as weak crypto (SHA-256 is secure), 'sudo' in package installation docs flagged as privilege escalation (legitimate apt install command), content hashes flagged as C2 keywords (standard Git metadata), backtick notation flagged as shell execution (standard markdown documentation), and git remote detection flagged as reconnaissance (legitimate GitLab detection). No executable code or security risks present.

Pure prompt-based documentation skill with no executable code. Provides guidance on using glab CLI for GitLab operations. No filesystem access, network calls, or code execution capabilities beyond documented command references.

Pure prompt-based documentation skill with no executable code. Provides guidance on using glab CLI for GitLab operations. No filesystem access, network calls, or code execution capabilities beyond documented command references.

Pure prompt-based documentation skill with no executable code. Provides guidance on using glab CLI for GitLab operations. No filesystem access, network calls, or code execution capabilities beyond documented command references.