📦

Audit History

skill-from-masters - 8 audits

Version comparison

Capability and finding changes across audited versions, newest first.

VersionDateResultReview itemsChange vs previous
v8 LatestJul 6, 2026, 03:25 PM No confirmed findings0No capability change
v7 Jul 6, 2026, 03:25 PM No confirmed findings0External commands Network access
v6 Jun 30, 2026, 01:27 AM 1 confirmed1Network access External commands
v5 Jan 17, 2026, 05:34 AM No confirmed findings0No capability change
v4 Jan 17, 2026, 05:34 AM No confirmed findings0External commands
v3 Jan 10, 2026, 05:40 AM No confirmed findings0No capability change
v2 Jan 10, 2026, 05:40 AM No confirmed findings0No capability change
v1 Jan 10, 2026, 05:40 AM No confirmed findings0Baseline

Jul 6, 2026, 03:25 PM

All static findings are false positives caused by Markdown formatting and benign research language. No prompt injection, command execution, data exfiltration, or system reconnaissance intent was found in SKILL.md or references/methodology-database.md.

2
Files scanned
401
Lines analyzed
1
Review items
0
False positives ignored

Risk Factors

⚙️ External commands (1)
Audited by: codex

Jul 6, 2026, 03:25 PM

All static findings are false positives caused by Markdown formatting and benign research language. No prompt injection, command execution, data exfiltration, or system reconnaissance intent was found in SKILL.md or references/methodology-database.md.

2
Files scanned
401
Lines analyzed
1
Review items
0
False positives ignored

Risk Factors

⚙️ External commands (1)
Audited by: codex

Jun 30, 2026, 01:27 AM

Static weak cryptography, system reconnaissance, and external command alerts were reviewed as false positives caused by prose, Markdown formatting, and framework names. The only confirmed concern is legitimate web research behavior, which may send user-provided topics to search or browsing tools.

2
Files scanned
401
Lines analyzed
3
Review items
2
False positives ignored

Confirmed security concerns (1)

Low
Markdown Backticks Mistaken For Command Execution
The flagged external command location is a Markdown-formatted file path reference. It tells the assistant to read a local reference document and does not invoke Ruby, shell, or subprocess execution.
The line contains only inline Markdown code formatting around references/methodology-database.md. There is no executable syntax or user-controlled command string.
Capability review items (1)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Low
Skill Uses External Web Research
The workflow instructs the assistant to search the web and fetch primary sources. This is legitimate for the skill purpose, but users should avoid including confidential topics in research queries.
The skill explicitly asks for web searches and source fetching. The behavior is intentional and bounded to research rather than data exfiltration.
Static false positives ignored (2)

These static matches were dismissed by semantic review or matched schema-only tokens, so they are shown for transparency but do not drive the quality score.

Low
Static Weak Cryptography Alerts Are False Positives
The flagged locations contain methodology names, expert names, book titles, and prose. I found no cryptographic APIs, hash functions, encryption routines, or credential handling at these locations.
The surrounding context is plain Markdown reference material. There is no executable code or cryptographic operation to misuse.
Low
Static System Reconnaissance Alerts Are Benign Research Text
The flagged lines describe questions, web research checks, and framework references. They do not enumerate local systems, inspect host configuration, or execute discovery commands.
The suspicious tokens appear in skill workflow prose and a methodology table. I found no command examples such as host, user, process, or network enumeration.

Risk Factors

Audited by: codex

Jan 17, 2026, 05:34 AM

All 45 static findings are FALSE POSITIVES. The skill is pure documentation with no executable code. Pattern detections (Weak Cryptographic Algorithm, System Reconnaissance, C2 Keywords) are triggered by author names in the methodology database (e.g., Schwartz, Ousterhout) and documentation language about web search. No data exfiltration, code execution, or malicious behavior exists.

3
Files scanned
589
Lines analyzed
1
Review items
0
False positives ignored

Risk Factors

⚙️ External commands (1)
Audited by: claude

Jan 17, 2026, 05:34 AM

All 45 static findings are FALSE POSITIVES. The skill is pure documentation with no executable code. Pattern detections (Weak Cryptographic Algorithm, System Reconnaissance, C2 Keywords) are triggered by author names in the methodology database (e.g., Schwartz, Ousterhout) and documentation language about web search. No data exfiltration, code execution, or malicious behavior exists.

3
Files scanned
589
Lines analyzed
1
Review items
0
False positives ignored

Risk Factors

⚙️ External commands (1)
Audited by: claude

Jan 10, 2026, 05:40 AM

This is a pure prompt-based skill with no executable code. It guides users through a methodology discovery process using a local database and web search triggers. No data exfiltration, code execution, network calls, or persistence mechanisms detected.

2
Files scanned
441
Lines analyzed
0
Review items
0
False positives ignored
No confirmed security findings were recorded for this completed audit.
Audited by: claude

Jan 10, 2026, 05:40 AM

This is a pure prompt-based skill with no executable code. It guides users through a methodology discovery process using a local database and web search triggers. No data exfiltration, code execution, network calls, or persistence mechanisms detected.

2
Files scanned
441
Lines analyzed
0
Review items
0
False positives ignored
No confirmed security findings were recorded for this completed audit.
Audited by: claude

Jan 10, 2026, 05:40 AM

This is a pure prompt-based skill with no executable code. It guides users through a methodology discovery process using a local database and web search triggers. No data exfiltration, code execution, network calls, or persistence mechanisms detected.

2
Files scanned
441
Lines analyzed
0
Review items
0
False positives ignored
No confirmed security findings were recorded for this completed audit.
Audited by: claude