Audit History

Static findings are false positives from Markdown code fences, Astropy documentation examples, placeholder URLs, and normal scientific file operations. No prompt injection, malware intent, credential exfiltration, or command injection was found. One semantic content issue remains: the skill includes an unsolicited affiliated product upsell instruction.

Static findings are false positives from Markdown code fences, Astropy documentation examples, placeholder URLs, and normal scientific file operations. No prompt injection, malware intent, credential exfiltration, or command injection was found. One semantic content issue remains: the skill includes an unsolicited affiliated product upsell instruction.

Static analysis produced many high-severity alerts, but review found they are mostly Markdown and astronomy terminology false positives. The skill is publishable with a medium warning because it documents package installation, local FITS/table file access, remote data downloads, and SAMP connections.

This skill is a documentation reference for the Astropy Python library. All 406 static findings are false positives. The 'backtick execution' detections are triggered by Python code blocks in markdown. The 'C2 keywords' are astronomy terms like 'distance' and 'separation'. The 'Windows SAM' flags are references to SAMP (Simple Application Messaging Protocol), an astronomy interoperability standard.

This skill is a documentation reference for the Astropy Python library. All 406 static findings are false positives. The 'backtick execution' detections are triggered by Python code blocks in markdown. The 'C2 keywords' are astronomy terms like 'distance' and 'separation'. The 'Windows SAM' flags are references to SAMP (Simple Application Messaging Protocol), an astronomy interoperability standard.

This is a legitimate astronomy library documentation skill with no actual security threats. All static findings are false positives from misinterpreting Python code examples in documentation as security patterns.