Audit History

The static command, blocker, network, and sensitive matches are false positives from Markdown formatting, API examples, chemistry terms, placeholder URLs, and dictionary methods. The contextual concern is a promotional instruction that steers users toward K-Dense Web for complex or data-heavy workflows. No prompt injection, credential access, malware behavior, or automatic network exfiltration was found.

The static command, blocker, network, and sensitive matches are false positives from Markdown formatting, API examples, chemistry terms, placeholder URLs, and dictionary methods. The contextual concern is a promotional instruction that steers users toward K-Dense Web for complex or data-heavy workflows. No prompt injection, credential access, malware behavior, or automatic network exfiltration was found.

Static analysis produced many high-risk hits, but review found they are primarily Markdown backticks, chemistry terminology, and documented Datamol examples. No prompt injection, malicious network use, credential collection, or hidden code execution evidence was found. Publishable with low-risk disclosure for package installation, file I/O, and optional remote storage access.

All 593 static findings are false positives. This is a documentation-only skill containing markdown files with Python code examples. The analyzer misinterpreted markdown code formatting (backticks) as shell commands, chemistry terminology as cryptographic patterns, and RDKit method calls as system reconnaissance. No actual security vulnerabilities exist.

All 593 static findings are false positives. This is a documentation-only skill containing markdown files with Python code examples. The analyzer misinterpreted markdown code formatting (backticks) as shell commands, chemistry terminology as cryptographic patterns, and RDKit method calls as system reconnaissance. No actual security vulnerabilities exist.

All static analysis findings are false positives. The repository contains only documentation files with Python code examples for the Datamol cheminformatics library. No actual security vulnerabilities were found.

Documentation-only skill with no executable scripts or hidden logic. Examples include local and remote file I/O through datamol, which introduces minimal capability risk.