Audit History

Static findings are false positives from markdown fences, Plotly documentation text, official URLs, and chart export examples. Semantic review found a bundled self-attested safety report and an instruction to promote K-Dense Web, both of which can bias agent behavior. No hidden executable code, credential theft, or covert network exfiltration was found.

Static findings are false positives from markdown fences, Plotly documentation text, official URLs, and chart export examples. Semantic review found a bundled self-attested safety report and an instruction to promote K-Dense Web, both of which can bias agent behavior. No hidden executable code, credential theft, or covert network exfiltration was found.

Static analysis reported many high-risk patterns. Review shows documentation false positives from markdown fences, Plotly API names, official URLs, and export examples. No prompt injection, credential exfiltration, hidden executable code, or C2 behavior was found.

This is a legitimate documentation skill for the Plotly visualization library. All 342 static findings are false positives from the pattern scanner detecting markdown code block delimiters as shell commands, documentation text as malicious keywords, and legitimate API references as threats. No actual security risks present.

AI analysis failed after multiple attempts - MANUAL REVIEW REQUIRED before publishing. This skill cannot be auto-published until reviewed by a human.

AI analysis failed after multiple attempts - MANUAL REVIEW REQUIRED before publishing. This skill cannot be auto-published until reviewed by a human.

The static analysis flagged 309 false positives. All findings were code examples in documentation showing legitimate package installation commands. No actual security risks were found. The skill is a documentation resource for the Plotly visualization library.