Skills youtrack Audit History
📦

Audit History

youtrack - 7 audits

Version comparison

Capability and finding changes across audited versions, newest first.

VersionDateResultReview itemsChange vs previous
v7 LatestJul 5, 2026, 06:52 PM 1 confirmed0No capability change
v6 Jul 5, 2026, 06:52 PM 1 confirmed0No capability change
v5 Jun 30, 2026, 04:19 AM No confirmed findings2No capability change
v4 Jan 17, 2026, 06:42 AM No confirmed findings0No capability change
v3 Jan 17, 2026, 06:42 AM No confirmed findings0Network accessExternal commands
v2 Jan 4, 2026, 04:32 PM No confirmed findings0No capability change
v1 Jan 4, 2026, 04:32 PM No confirmed findings0Baseline

Jul 5, 2026, 06:52 PM

Most static findings are Markdown backtick and code-fence false positives, not executable Ruby or hidden shell substitution. The skill still documents YouTrack state-changing workflows, including release version deletion, without explicit approval guardrails. No prompt injection or credential exfiltration intent was found.

1
Files scanned
132
Lines analyzed
3
Review items
0
False positives ignored

Confirmed security concerns (1)

Medium
YouTrack State Changes Lack Approval Guardrails
The skill documents commands that add comments, change tags, update statuses, create versions, and delete versions without explicit confirmation guidance. In an agent workflow, mistaken execution could alter issue tracker records or release metadata.
The documented workflows include multiple mutating YouTrack actions and a delete-version command, and no adjacent approval requirement is present. The risk is operational rather than malicious, so confidence is high but not absolute.
Audited by: codex

Jul 5, 2026, 06:52 PM

Most static findings are Markdown backtick and code-fence false positives, not executable Ruby or hidden shell substitution. The skill still documents YouTrack state-changing workflows, including release version deletion, without explicit approval guardrails. No prompt injection or credential exfiltration intent was found.

1
Files scanned
132
Lines analyzed
3
Review items
0
False positives ignored

Confirmed security concerns (1)

Medium
YouTrack State Changes Lack Approval Guardrails
The skill documents commands that add comments, change tags, update statuses, create versions, and delete versions without explicit confirmation guidance. In an agent workflow, mistaken execution could alter issue tracker records or release metadata.
The documented workflows include multiple mutating YouTrack actions and a delete-version command, and no adjacent approval requirement is present. The risk is operational rather than malicious, so confidence is high but not absolute.
Audited by: codex

Jun 30, 2026, 04:19 AM

Static external-command findings are true in the sense that the skill documents many npx tsx commands, but they are not Ruby backtick execution. The commands are legitimate YouTrack workflows, yet they can mutate tickets through a token-backed external service, so publication should include a warning. The hardcoded URL is the expected JetBrains YouTrack host, and the weak-cryptography finding at SKILL.md line 3 appears to be a false positive.

1
Files scanned
132
Lines analyzed
4
Review items
2
False positives ignored
Capability review items (2)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium
Token-backed external issue tracker mutations
The skill instructs users to run npx tsx YouTrack CLI commands that add comments, manage tags, set status, and create or delete release versions. These actions require YOUTRACK_TOKEN and can change external YouTrack data, so users should review commands before execution.
The file directly documents token use and multiple mutation commands. The intent appears operational rather than malicious, which limits severity.
Low
Expected hardcoded YouTrack service URL
The hardcoded URL points to the JetBrains YouTrack project used by the skill. This is an expected endpoint for an issue-tracker integration and does not indicate data exfiltration by itself.
The URL matches the stated YouTrack integration purpose. No evidence found of hidden endpoints or unauthorized network destinations.
Static false positives ignored (2)

These static matches were dismissed by semantic review or matched schema-only tokens, so they are shown for transparency but do not drive the quality score.

Low
Static analyzer misclassified Markdown command examples
The analyzer reported Ruby or shell backtick execution across many lines, but the evidence is Markdown inline code and fenced bash examples. The examples still represent external commands users may run, but there is no executable Ruby backtick code in the skill file.
Line-numbered review shows Markdown code formatting, not Ruby execution syntax. The commands are documentation for local CLI usage.
Low
Weak cryptography finding appears false positive
The static analyzer flagged weak cryptography at SKILL.md line 3, but that line is descriptive front matter for the skill. No evidence found of cryptographic code, hashing, encryption, or credential transformation in the reviewed file.
The cited line contains only the skill description. The reviewed file does not contain crypto APIs or algorithm names used as code.

Detected Patterns

External command execution guidance
Audited by: codex

Jan 4, 2026, 04:32 PM

The directory contains documentation and metadata only. No executable code, scripts, or network-capable logic are present here.

4
Files scanned
184
Lines analyzed
0
Review items
0
False positives ignored
No confirmed security findings were recorded for this completed audit.
Audited by: claude

Jan 4, 2026, 04:32 PM

The directory contains documentation and metadata only. No executable code, scripts, or network-capable logic are present here.

4
Files scanned
184
Lines analyzed
0
Review items
0
False positives ignored
No confirmed security findings were recorded for this completed audit.
Audited by: claude