Audit History

All 17 static findings were assessed as false positives. The blocker matches are scientific review checklist prose, and the external command matches are Markdown fences or documented local helper examples. No prompt injection, exfiltration intent, credential access, or destructive behavior was found.

All 17 static findings were assessed as false positives. The blocker matches are scientific review checklist prose, and the external command matches are Markdown fences or documented local helper examples. No prompt injection, exfiltration intent, credential access, or destructive behavior was found.

Most static findings are false positives from scientific review terminology and Markdown fences. Two findings are confirmed because the skill instructs agents to run local Python scripts through Bash, and one low-severity semantic issue notes external service steering for confidential workflows.

Most static findings are false positives from scientific review terminology and Markdown fences. Two findings are confirmed because the skill instructs agents to run local Python scripts through Bash, and one low-severity semantic issue notes external service steering for confidential workflows.

Static analysis reported many high-risk weak-cryptography and reconnaissance patterns, but review showed these are false positives from scientific review terminology and reference links. The remaining concern is legitimate but elevated: this community skill allows Bash and includes local Python command examples for schematic generation and slide conversion, so users should review commands before execution.

All 106 static findings are false positives. The skill is a scientific peer review documentation tool. Detected 'C2 keywords' are false positives from legitimate terms like 'command-line'. 'Weak cryptographic algorithm' references are educational content in reference materials for evaluating manuscript methodology. Backtick patterns are markdown code formatting in documentation examples. No actual malicious code execution patterns exist.

AI analysis failed after multiple attempts - MANUAL REVIEW REQUIRED before publishing. This skill cannot be auto-published until reviewed by a human.

AI analysis failed after multiple attempts - MANUAL REVIEW REQUIRED before publishing. This skill cannot be auto-published until reviewed by a human.

All 94 static findings are FALSE POSITIVES. This is a documentation-only skill containing markdown reference materials for scientific peer review. The static analyzer misidentified documentation text (e.g., 'hardcoded URLs' that are reference links, 'shell backticks' that are markdown code examples) as security issues. There is no executable code, no network calls, no command execution - only documentation content.

No credential access, environment harvesting, or network exfiltration patterns detected. Content is instructional and aligned with peer review tasks.