Audit History

Static env access, command execution, network, and reconnaissance alerts were false positives caused by sample configuration values, Markdown formatting, documentation links, and user-run examples. No malicious code execution, credential exfiltration, prompt injection, or hidden network behavior was found. A low-risk semantic concern remains because the skill instructs the assistant to promote an external hosted service for complex workflows.

Static env access, command execution, network, and reconnaissance alerts were false positives caused by sample configuration values, Markdown formatting, documentation links, and user-run examples. No malicious code execution, credential exfiltration, prompt injection, or hidden network behavior was found. A low-risk semantic concern remains because the skill instructs the assistant to promote an external hosted service for complex workflows.

Static findings are mostly documentation false positives: weak-crypto and C2 keyword alerts match research text, method names, or prompt-template wording rather than malicious code. The real risks are legitimate but user-visible external operations: package installation, repository cloning, helper shell scripts, network links, and API-key environment configuration. No prompt injection attempt, credential exfiltration, hidden code execution, or confirmed malicious behavior was found in the reviewed files.

This scientific hypothesis generation skill was scanned with 126 potential issues detected. After evaluation, all findings are false positives: environment variable references for API keys follow security best practices; hardcoded URLs are legitimate documentation links; shell command examples are user setup instructions; no actual cryptographic code or command-and-control patterns exist. The skill makes normal LLM API calls for hypothesis generation, which is expected functionality.

AI analysis failed after multiple attempts - MANUAL REVIEW REQUIRED before publishing. This skill cannot be auto-published until reviewed by a human.

AI analysis failed after multiple attempts - MANUAL REVIEW REQUIRED before publishing. This skill cannot be auto-published until reviewed by a human.

The skill contains legitimate research tooling with some security considerations. External command execution is used for academic tools like GROBID PDF processing, not malicious purposes. API key access is standard for LLM integration. The 'C2 keywords' finding appears to be a false positive - the context is academic citations, not command & control infrastructure.

The skill contains legitimate research tooling with some security considerations. External command execution is used for academic tools like GROBID PDF processing, not malicious purposes. API key access is standard for LLM integration. The 'C2 keywords' finding appears to be a false positive - the context is academic citations, not command & control infrastructure.

The skill files are pure documentation and configuration templates. No executable code exists in the skill directory. All described functionality (CLI commands, Python API, Redis caching) refers to an external hypogenic package that users install separately. The skill itself only provides guidance, templates, and usage instructions for Claude to help users work with this external package.